[Bitcoin Core Discloses Medium-Risk Vulnerability: Tor Inbound Connections Incorrectly Gain Whitelist Access] According to a Bitcoin Core security bulletin, the medium-risk vulnerability CVE-2025-62860 was disclosed on November 10, 2026. This vulnerability exists in versions prior to 28.3, 29.2, and 30.0. Because external connections connecting via Tor actually use the local Tor software's IP address, if this address matches a trusted IP range configured with the `-whitelist` option, Bitcoin Core incorrectly whitelists these external Tor connections, thereby removing various DoS protection and privacy mitigation measures for trusted nodes. The bulletin states that nodes without a non-default `-whitelist` option are never affected.