Core Lightning Urges Immediate Upgrade to Fix Multiple Vulnerabilities

Core Lightning has released an emergency update, urging all node runners to upgrade immediately to version 26.06.7. This release fixes multiple vulnerabilities reported over the past three weeks, which were identified using increasingly capable AI models.

The development team withheld technical details and source code for 14 days to prevent attackers from exploiting unpatched nodes before operators complete upgrades. This move follows a rise in AI-generated vulnerability reports targeting open-source Bitcoin projects.

Core Lightning warned operators about the upcoming security release, which included plans to distribute signed binaries before publishing source-level details. The latest release now puts this plan into action, allowing node runners to access the binaries while developers maintain temporary disclosure restrictions.