[Monero wallet RPC] File precreation to file ownership and credentials leak Analysed #2425873 Valid Access Control – 2024-09-04 – 75 Wallet RPC Restricted-Mode Policy Bypass Analysed #3620006 Valid Authentication High 2026-08-17 – 54 Restricted RPC leaks alternative block hashes via /get_alt_blocks_hashes Analysed #3738727 Valid Access Control Low 2026-07-20 – 52 Dynamic fee algorithm doesn't check for zero fee Analysed #1981441 Valid Denial of Service Low 2025-05-23 – 46 Monero GUI OpenAlias DNSSEC-invalid resolution still writes spoofable address into recipient field Analysed #3819475 Valid No weakness recorded Medium 2026-08-20 – 44 wallet-rpc crash via malformed /gettransactions response (empty txs → vector::front() in check_tx_key / check_tx_proof) Analysed #3693636 Valid Memory Corruption High 2026-08-05 – 44 `check_reserve_proof` counts duplicate entries: one output can inflate `total` Analysed #3699522 Valid Input Validation and Logic Medium 2026-08-05 – 42 Windows installer grants low-privileged users write access to executable P2Pool directory, enabling local code execution Analysed #3619409 Valid Access Control High 2026-08-20 – 40 `check_reserve_proof` sums RingCT ECDH amounts without checking the output commitment Analysed #3698862 Valid Cryptography Medium 2026-08-05 – 37 sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txset Analysed #3683934 Valid No weakness recorded High 2026-09-17 – 35 View-only offline transaction creation bypasses the long-payment-ID privacy block Analysed #3686283 Valid Information Disclosure Medium 2026-08-20 – 32 Authenticated `unsigned_txset` change spoof lets a malicious hot wallet steal cold-signer change Analysed #3621588 Valid Input Validation and Logic High 2026-09-16 – 32 SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hash Analysed #3700036 Valid Cryptography Medium 2026-08-05 – 28 Hardware Wallets Do Not Check Unlock TIme Analysed #817245 Valid Cryptography Medium 2021-09-12 – 27 Reported Denial of Service Analysed #3241102 Valid Denial of Service – 2026-04-06 – 23 ZMQ get_output_distribution duplicate amount DoS Analysed #3681690 Valid No weakness recorded Medium 2026-09-17 – 22 Spamming highly nested JSON RPC requests cause node to disconnect from p2p network Analysed #2677306 Valid Denial of Service – 2025-04-23 – 22 `monero-wallet-rpc::rescan_spent` accepts daemon-supplied spent-status from an untrusted daemon, enabling ring-intersection attack on transactions Analysed #3719670 Valid Information Disclosure Medium 2026-11-02 – 21 monero:// deeplink parsing accepts tx_amount=(all) and can trigger send-all transaction mode Analysed #3648638 Valid Input Validation and Logic Medium 2026-08-20 – 21 `relay_tx` wallet-rpc skips `--restricted-rpc` guard and lets any caller corrupt wallet state via attacker-controlled `pending_tx` Analysed #3687543 Valid Access Control Low 2026-08-05 – 20 wallet-rpc describe_transfer uses real_output_in_tx_index instead of real_output: cold-wallet pre-sign review shows wrong ring member Analysed #3723315 Valid Memory Corruption Medium 2026-08-05 – 19 Inverted ternary in peerlist_manager::filter() allows unlimited whitelist entries per host via different ports Analysed #3547349 Valid No weakness recorded – 2026-06-29 – 18 Array Index Underflow--http rpc Analysed #825091 Valid Memory Corruption High 2021-10-11 – 16