Home›Crypto›Bitcoin›Core Lightning orders node operators to choose upgrade…

Core Lightning orders node operators to choose upgrades or go offline

Developers said they will stop supporting prior Core Lightning releases, including version 26.04, while new, signed binaries are prepared under a two-week technical embargo.

Reported · Written up by our desk · Bitcoin

Core Lightning developers have asked Bitcoin Lightning node operators to make a security decision after receiving multiple AI-generated CVE reports over about 10 days, according to CryptoSlate. The team said it is preparing updated binaries that address multiple reported vulnerabilities and urged operators to install the new software before they can fully assess the threat.

CryptoSlate reported that Core Lightning will keep key technical details under embargo for two weeks, limiting operators’ ability to inspect the evidence behind the assessment or determine the exploit mechanism from public information. The developers also said operators who decline the upgrade should run their nodes offline.

The Core Lightning team plans to include team signatures with the binaries so users can verify provenance and reproducibility, building on its established release process that uses signed tags, signed checksums, and reproducible builds. CryptoSlate added that the team is also planning to stop supporting previous releases, including version 26.04, due to known risks.

CryptoSlate noted that Blockstream shipped Core Lightning versions 26.04 in April and 26.06 in June, with version 26.09 placed on the third-quarter roadmap. The outlet also said there is no evidence of exploitation in the wild in the available material, and operators still lack enough information to judge whether specific node configurations face the same risk.

Latest closeBitcoin $79,985.12 ▲1.2%

More like this

Sources