Bitcoin Core discloses CVE-2025-62860, a medium-risk vulnerability.

Bitcoin Core has disclosed a medium-risk vulnerability, CVE-2025-62860, which exists in versions prior to 28.3, 29.2, and 30.0. External connections made via Tor that match a trusted IP range configured with the `-whitelist` option will be incorrectly granted whitelist permissions, allowing bypassing DoS protection and privacy mitigation measures. Nodes that do not have the non-default -whitelist option set are unaffected.