Core Lightning Advises Node Operators to Go Offline Over Unpatched Vulnerability

1. #0108.27
   Initial2026-08-27 · edition date

   Core Lightning Advises Node Operators to Go Offline Over Unpatched Vulnerability

   Source evidence: The Defiant

2. #0209.09
   Response2026-09-09 08:30 · publication time

   Bitcoin Core Lightning Docker bug leaves node operators exposed despite showing updated version

   Disclosed a Docker build error distributing unpatched binaries under four tags that reported v26.06.7 at startup, requiring operators to verify image digests and replace affected images.

   State after update: Core Lightning operators still need to address the unpatched vulnerability, now with added instructions to verify Docker image digests, with source disclosure planned for Sept. 11.

   Source evidence: CryptoSlate

3. #0310.02
   Escalation2026-10-02 04:18 · publication time

   Core Lightning warns attackers are targeting unpatched nodes

   Core Lightning received reports of attackers actively targeting unpatched nodes and urged operators running version 26.06.7 or earlier to upgrade to the latest release immediately.

   State after update: Attackers are actively targeting unpatched Core Lightning nodes; operators on version 26.06.7 or earlier are urged to upgrade immediately, and prior instructions to verify Docker image digests remain relevant.

   Source evidence: Cointelegraph

All events · Back to the feed