Bitcoin Core versions 0.14 through 28.x contain a security vulnerability identified as CVE-2024-52911. The issue relates to improper access control (CWE-284), potentially allowing unauthorized network-based access without user interaction. The CVSS 3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Specific technical details and impact scenarios have not been publicly disclosed.

The vulnerability could allow an unauthenticated attacker to gain unauthorized access or perform actions that compromise confidentiality, as indicated by the high confidentiality impact in the CVSS vector. Integrity and availability impacts are not indicated. The lack of disclosed details limits precise impact assessment. No known exploits have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor official Bitcoin Core channels for updates. Avoid exposure of vulnerable Bitcoin Core instances to untrusted networks until a patch or guidance is available.