Bitcoin Core monitoring information shows that the medium-severity vulnerability CVE-2025-62860 was publicly disclosed on November 10, 2026. The vulnerability affects versions earlier than 28.3, 29.2, and 30.0. When the IP address of the local Tor software matches a trusted range configured via -whitelist, external Tor connections may be mistakenly granted trusted status. The announcement states that nodes that did not set the non-default -whitelist option were never affected.