highperfocused/bitcoin
1
0
Fork 0
mirror of https://github.com/bitcoin/bitcoin.git synced 2026-09-11 21:20:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

doc: add -walletnotify security note

Browse Source 
Co-authored-by: maflcko <6399679+maflcko@users.noreply.github.com>
This commit is contained in:
Lőrinc
2026-09-01 11:30:27 -07:00
parent 1f9dfabef6
commit db39de5601
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
doc/release-notes-36048.md Normal file
View File

@@ -0,0 +1,8 @@
Wallet
------
* On non-Windows systems, an authenticated RPC caller allowed to create wallets
could execute arbitrary commands as the node process account when
`-walletnotify` was configured, by crafting a wallet name with regex
replacement characters. Wallet notification placeholder replacement now
treats wallet names literally. (#36048)