Core Lightning Discloses Vulnerability, Urges Node Operators to Go Offline

BitcoinWorld Core Lightning Discloses Vulnerability, Urges Node Operators to Go Offline Core Lightning (CLN), a prominent implementation of the Bitcoin Lightning Network, has published a CVE vulnerability report and is urging all node operators to take their nodes offline immediately.

The advisory, which was first reported by Crypto Briefing, does not disclose technical details of the flaw, citing a two-week embargo to allow operators time to apply patches.

What We Know So Far According to the report, all nodes running CLN version 26.04 or earlier are affected. Support for these versions has officially ended, and a patched version has not yet been released.

The two-week embargo is a common practice for exploitable vulnerabilities, giving node operators a window to update their systems before full technical details are made public. The lack of a patched release means that operators are currently in a vulnerable state.