CVE-2026-117346: High severity Bitcoin Bitcoin Core vulnerability

Q: Who can exploit this issue?

The vector is network-based, requires low attack complexity, and does not require privileges or user interaction. Systems running affected Bitcoin Core versions are exposed to a remote denial-of-service condition.

Q: What is the operational impact?

The stated impact is availability only: the vulnerability can cause denial of service. No confidentiality or integrity impact is identified in the supplied severity vector.

Q: Which versions should be investigated?

Bitcoin Core through version 31.1 is identified as affected. Inventory nodes to determine whether they run version 31.1 or an earlier release.

Published Oct 30, 2026

Updated

Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit

Affected Software

1 affected component

Bitcoin Bitcoin Core<=31.1

Event History

Oct 30, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vector is network-based, requires low attack complexity, and does not require privileges or user interaction. Systems running affected Bitcoin Core versions are exposed to a remote denial-of-service condition.

What is the operational impact?

The stated impact is availability only: the vulnerability can cause denial of service. No confidentiality or integrity impact is identified in the supplied severity vector.

Which versions should be investigated?

Bitcoin Core through version 31.1 is identified as affected. Inventory nodes to determine whether they run version 31.1 or an earlier release.

CVE-2026-117346: High severity Bitcoin Bitcoin Core vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the operational impact?

Which versions should be investigated?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the operational impact?

Which versions should be investigated?