🎯 New Report #3601469: Restricted RPC Policy Bypass on ZMQ JSON-RPC Allows Unauthenticated Remote Admin Actions
🔺Severity: High
👽 Reporter: usagirabbit
⭐️ Reputation: 163
🛠 State: resolved
💼 Team: Monero
💵 Bounty: null
🕐 Submitted: 2026-03-12
⏰ Disclosed: 2026-08-17 09:16:00
📝 Summary: A high-severity access-control issue was found in Monero's ZMQ JSON-RPC surface. When the daemon is started in restricted/public-node mode, the HTTP RPC layer correctly suppresses admin-only methods, but the ZMQ JSON-RPC layer did not inherit or enforce that restriction. This allowed an unauthenticated remote client to invoke state-changing methods that should have been unavailable in restricted mode.
📂 Report JSON File: 3601469
@hackeronereports