Core Lightning Tells Node Operators to Shut Down Amid Unpublished Patch

Core Lightning's maintainers have told node operators to shut down their nodes unless they upgrade to a new release that has not been published. The message was circulated in the project's Discord and confirmed by Mark Erhardt, a Bitcoin Core contributor at Localhost Research. However, no binaries or advisory had appeared as of Wednesday afternoon.

The newest tagged release is v26.06.6 from July 22, and the project's security advisories page lists none. This is the fourth Bitcoin infrastructure alarm in four weeks, following issues with Coldcard firmware, Boltz shutdown, and BTCPay Server flaw.