Core Lightning Issues Urgent Security Alert After AI Uncovers Real Vulnerabilities

Core Lightning, one of the main software implementations for sending and routing Bitcoin payments over the Lightning Network, has issued an urgent security alert to node operators. The warning comes after AI-generated Common Vulnerabilities and Exposures reports identified several genuine problems.

The Core Lightning development team received a large volume of AI-generated reports in August and spent time validating the submissions and developing fixes. Several of the vulnerabilities were confirmed, but the details remain private for at least two weeks while developers prepare fixes and operators update their nodes.

Core Lightning plans to distribute signed, reproducible binaries carrying the fixes, allowing operators to verify the files came from the development team before installing them. The source code and technical details of the vulnerabilities are expected to be published after the two-week embargo window closes.