Bitcoin Core Discloses Medium-Severity Vulnerability in Tor Connection Whitelisting

According to TechFlow, on November 11, The Block reported that Bitcoin Core disclosed a fixed medium-severity vulnerability in which nodes with certain configurations could incorrectly grant whitelisting privileges to inbound Tor connections.

The vulnerability, CVE-2025-62860, affects nodes that have the optional whitelisting feature enabled and whose IP ranges include Tor proxies. Bitcoin Core said thousands of reachable mainnet nodes had whitelisted inbound Tor connections, causing certain denial-of-service restrictions and privacy protections to fail.

Bitcoin Core 30.0 and 29.2 included the fix in October 2025, respectively. Two other vulnerabilities disclosed during the same period involved block processing and block template creation by mining nodes, which TechFlow had previously reported separately.

Source: TechFlow