Bitcoin Core detailed three vulnerabilities patched in October 2025 but made public on November 10, 2026, after support ended for the last affected release line. The high-severity flaw, CVE-2025-62861, could prevent miners from producing a valid block template during a chain reorganization involving TRUC transactions, affecting versions 28.0 through 28.2 and 29.0 through 29.1. Vulnerability CVE-2025-62860 granted elevated permissions to inbound Tor peers when the non-default -whitelist option was enabled, while CVE-2025-62859 allowed a malicious peer to stall compact block processing for approximately 10 minutes. Bitcoin Core reported no active exploitation and said version 30.0 and releases patched since October 2025 are no longer affected.
Source: Read the original article
