POOL_UPGRADE request handler may allow an unauthenticated attacker to remotely execute code on every node in the network.