AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 25 Cryptographic libraries

Expose wallet exist as rpc command

Public commit record

What the developer wrote

Authored by Deverick

45/100 · Thin
Expose wallet exist as rpc command
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
The short version

What changed, and why it matters

This commit adds a new wallet RPC command called wallet_exists that lets a caller check whether a wallet file already exists on the server. It also refactors existing filename validation into a shared helper. The change is mostly a feature addition, but it does expose filesystem information (file presence) over the RPC interface, which can aid reconnaissance if the RPC endpoint is reachable by an attacker.

Recommended action

Treat this as a low-sensitivity informational exposure. Ensure wallet RPC is not exposed to untrusted networks, confirm restricted mode is used where appropriate, and consider whether wallet_exists should require the same authentication level as open_wallet. No immediate patching is required unless the RPC interface is publicly reachable.

Security signals we found

01

New RPC endpoint exposes filesystem state (existence of specific wallet files)

02

Refactored path-separator validation reduces code duplication but does not strengthen it

03

Restricted-mode denial is present, limiting exposure on restricted RPC servers

04

No authentication or authorization change beyond existing RPC model

Risk score

Why this scored 25/100

Our methodology →
Potential impact 2/30
Exploitability 3/25
Stealth signal 4/15
Affected reach 5/15
Confidence 7/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.