Core Lightning Advises Node Operators to Go Offline Over Unpatched Vulnerability

DevelopingCryptoOtherFirst tracked 2026-08-27Last changed 2026-09-09

Current outcome

Core Lightning operators still need to address the unpatched vulnerability, now with added instructions to verify Docker image digests, with source disclosure planned for Sept. 11.

Progress timeline

2 material updates

#0108.27
Initial2026-08-27 · edition date
Core Lightning Advises Node Operators to Go Offline Over Unpatched Vulnerability
Source evidence: The Defiant
#0209.09
Response2026-09-09 08:30 · publication time
Bitcoin Core Lightning Docker bug leaves node operators exposed despite showing updated version
Disclosed a Docker build error distributing unpatched binaries under four tags that reported v26.06.7 at startup, requiring operators to verify image digests and replace affected images.
State after update: Core Lightning operators still need to address the unpatched vulnerability, now with added instructions to verify Docker image digests, with source disclosure planned for Sept. 11.
Source evidence: CryptoSlate

All events · Back to the feed