Critical Deadlock Vulnerability in Monero RPC Leading to Complete Node Paralysis Analysed #3307874 Valid Denial of Service Critical 2026-05-06 – 97 low-level p2p ping + tcp flooding leads to a remote crash in monerod Analysed #2858802 Valid No weakness recorded Critical 2025-04-14 – 97 [Monero wallet RPC] File precreation to file ownership and credentials leak Analysed #2425873 Valid Access Control – 2024-09-04 – 75 Wallet RPC Restricted-Mode Policy Bypass Analysed #3620006 Valid Authentication High 2026-08-17 – 54 Restricted RPC leaks alternative block hashes via /get_alt_blocks_hashes Analysed #3738727 Valid Access Control Low 2026-07-20 – 52 RPC service DOS Analysed #2338094 Valid Denial of Service Medium 2025-05-23 – 47 Dynamic fee algorithm doesn't check for zero fee Analysed #1981441 Valid Denial of Service Low 2025-05-23 – 46 Monero GUI OpenAlias DNSSEC-invalid resolution still writes spoofable address into recipient field Analysed #3819475 Valid No weakness recorded Medium 2026-08-20 – 44 wallet-rpc crash via malformed /gettransactions response (empty txs → vector::front() in check_tx_key / check_tx_proof) Analysed #3693636 Valid Memory Corruption High 2026-08-05 – 44 forum.getmonero.org Shell upload Analysed #357858 Valid Command and Code Injection High 2018-07-27 – 43 `check_reserve_proof` counts duplicate entries: one output can inflate `total` Analysed #3699522 Valid Input Validation and Logic Medium 2026-08-05 – 42 Windows installer grants low-privileged users write access to executable P2Pool directory, enabling local code execution #3619409 Valid Access Control High 2026-08-20 – 40 Restricted RPC Policy Bypass on ZMQ JSON-RPC Allows Unauthenticated Remote Admin Actions #3601469 Valid Authentication High 2026-08-17 – 40 Connection Count Bug in Monero Node Enables Outbound Peer Reset Attack #3185083 Valid Information Disclosure – 2026-05-06 – 39 `check_reserve_proof` sums RingCT ECDH amounts without checking the output commitment #3698862 Valid Cryptography Medium 2026-08-05 – 37 sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txset #3683934 Valid No weakness recorded High 2026-09-17 – 35 View-only offline transaction creation bypasses the long-payment-ID privacy block #3686283 Valid Information Disclosure Medium 2026-08-20 – 32 Authenticated `unsigned_txset` change spoof lets a malicious hot wallet steal cold-signer change #3621588 Valid Input Validation and Logic High 2026-09-16 – 32 HTML Injection in Transaction Confirmation Dialog via Address Book Description Enables UI Spoofing Before Fund Transfer #3679471 Valid Command and Code Injection Medium 2026-08-20 – 30 ZMQ RPC Log Injection and Untrusted Payload Persistence #3621606 Valid Injection and Smuggling Medium 2026-07-24 – 30 CryptoNote: remote node DoS #506595 Valid Denial of Service High 2019-07-03 – 30 Monero Website & Kovri on your policy are returning 404 not found. #265161 Valid Input Validation and Logic None 2018-04-25 – 29 SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hash #3700036 Valid Cryptography Medium 2026-08-05 – 28 RPC call crashes node #1379707 Valid Denial of Service High 2022-08-20 – 28 Hardware Wallets Do Not Check Unlock TIme #817245 Valid Cryptography Medium 2021-09-12 – 27 Restricted ZMQ RPC bypasses HTTP restricted-mode resource checks #3683886 Valid No weakness recorded Medium 2026-09-17 – 26 Reported RPC Overflow #3240792 Valid Memory Corruption – 2026-04-06 – 25 Remote memory exhaustion in Epee RPC stack under zero Receive Window #2912194 Valid Denial of Service High 2025-04-23 – 24 Remote node DOS #876530 Valid Denial of Service Medium 2026-06-29 – 24 Monero IPv6 /128 tracking bypasses per-IP limit, enables remote OOM #3816330 Valid Denial of Service High 2026-10-28 – 23 Reported Denial of Service #3241102 Valid Denial of Service – 2026-04-06 – 23 A peer can remotely fill the pending block queue to an extremely high size, with blocks that will never leave the queue. #2693786 Valid No weakness recorded – 2025-04-23 – 23 Transactions in invalid blocks are kept in tx-pool without undergoing certain checks. #2315026 Valid No weakness recorded – 2025-04-23 – 23 ZMQ get_output_distribution duplicate amount DoS #3681690 Valid No weakness recorded Medium 2026-09-17 – 22 Spamming highly nested JSON RPC requests cause node to disconnect from p2p network #2677306 Valid Denial of Service – 2025-04-23 – 22 `monero-wallet-rpc::rescan_spent` accepts daemon-supplied spent-status from an untrusted daemon, enabling ring-intersection attack on transactions #3719670 Valid Information Disclosure Medium 2026-11-02 – 21 monero:// deeplink parsing accepts tx_amount=(all) and can trigger send-all transaction mode #3648638 Valid Input Validation and Logic Medium 2026-08-20 – 21 `relay_tx` wallet-rpc skips `--restricted-rpc` guard and lets any caller corrupt wallet state via attacker-controlled `pending_tx` #3687543 Valid Access Control Low 2026-08-05 – 20 Unix time unlock_time values have dangerous validation rules enabling a number of exploits #854726 Valid Input Validation and Logic High 2021-09-12 – 20 wallet-rpc describe_transfer uses real_output_in_tx_index instead of real_output: cold-wallet pre-sign review shows wrong ring member #3723315 Valid Memory Corruption Medium 2026-08-05 – 19 Inverted ternary in peerlist_manager::filter() allows unlimited whitelist entries per host via different ports #3547349 Valid No weakness recorded – 2026-06-29 – 18 Attcker can trick monero wallet into reporting it recived twice as much with alternative tx_keypubs #379049 Valid Input Validation and Logic High 2018-07-27 – 17 Array Index Underflow--http rpc #825091 Valid Memory Corruption High 2021-10-11 – 16 Exploiting Network and Timing Side-Channels to Break Monero Receiver Anonymity #713321 Valid No weakness recorded Medium 2019-11-15 – 16 Reentrancy attack in eth-monero atomic swap #1668258 Valid Access Control – 2023-04-20 – 15 Kovri: potential buffer over-read in garlic clove handling + I2NP message creation #291489 Valid Information Disclosure High 2017-12-05 – 14 Buffer out of bound read in miniupnpc xml parser #340012 Valid Memory Corruption Low 2018-04-25 – 13 Corrupt RPC responses from remote daemon nodes can lead to transaction tracing #304770 Valid Information Disclosure Medium 2018-03-16 – 13 Loss of multisig funds through single malicious participant's deliberate deception #3515557 Valid Input Validation and Logic Medium 2026-08-20 – 12 Malicious get_random_rct_outs.bin rpc can cause a near-infinite loop #391611 Valid Denial of Service High 2018-09-28 – 12