CVE-2021-3195

bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions

• CWE-20

• https://github.com/bitcoin/bitcoin/issues/20866Exploit, Issue Tracking, Third Party Advisory
• https://github.com/bitcoin/bitcoin/issues/20866Exploit, Issue Tracking, Third Party Advisory

Published

Jan 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-319443D Viewer Information Disclosure Vulnerability5
• CVE-2021-31945Paint 3D Remote Code Execution Vulnerability7.8
• CVE-2021-31946Paint 3D Remote Code Execution Vulnerability7.8
• CVE-2021-31947HEVC Video Extensions Remote Code Execution Vulnerability7.8
• CVE-2021-31948Microsoft SharePoint Server Spoofing Vulnerability7.6
• CVE-2021-31949Microsoft Outlook Remote Code Execution Vulnerability7.3
• CVE-2021-31950Microsoft SharePoint Server Spoofing Vulnerability7.6
• CVE-2021-31951Windows Kernel Elevation of Privilege Vulnerability7.8
• CVE-2021-31952Windows Kernel-Mode Driver Elevation of Privilege Vulnerabil…7.8
• CVE-2021-31953Windows Filter Manager Elevation of Privilege Vulnerability7.8
• CVE-2021-31954Windows Common Log File System Driver Elevation of Privilege…7.8
• CVE-2021-31955Windows Kernel Information Disclosure Vulnerability5.5