Monero: `relay_tx` wallet-rpc skips `--restricted-rpc` guard and lets any caller corrupt wallet state via attacker-controlled `pending_tx`

The relaytx wallet-RPC method in Monero was found to bypass the --restricted-rpc guard, allowing any caller to corrupt the wallet state by submitting a malicious pendingtx blob. The issue was that the onrelaytx handler did not perform any ownership checks on the supplied pendingtx before passing ...