Core Lightning Urges Node Operators Offline Due to Vulnerabilities

• •Core Lightning advises immediate offline operation for nodes running version 26.04 or earlier.
• •A patch is expected within 48 hours, but technical details are under a two-week embargo.
• •No confirmed exploitation has been reported, but the vulnerabilities pose a high risk to funds.

Core Lightning has disclosed multiple vulnerabilities affecting all nodes running version 26.04 or earlier, urging operators to take their nodes offline immediately. The vulnerabilities were identified through AI-generated CVE reports, and while a patch is expected within 48 hours, a two-week embargo on technical details is in place. Operators are advised to use the --offline mode to keep their nodes active without routing transactions, as stopping the node entirely would prevent monitoring of the Bitcoin blockchain. No confirmed exploitation has been reported, but the urgency of the advisory suggests a significant risk of fund loss and network disruption. The incident highlights ongoing challenges in maintaining secure decentralized infrastructure, particularly as public channel capacity on the Lightning Network has declined significantly over the past months.