Core Lightning Issues Urgent Security Alert for Unpatched Nodes

Core Lightning has issued a security alert warning Bitcoin Lightning Network node operators to upgrade immediately due to reports of attackers targeting systems still running version 26.06.7 or earlier.

The team has not disclosed which vulnerabilities are being exploited or whether any of the reported attacks have resulted in lost funds, but notes that version 26.06.8 patched several security flaws, including bugs that could crash nodes, exhaust memory, or cause funds to be lost during channel closures.

This warning follows a series of security updates since August, when developers confirmed vulnerabilities after reviewing AI-generated reports. The team recommends that operators using affected older releases move to the latest version as soon as possible.