Core Lightning issues urgent upgrade warning

6.7 Security

Oct 2, 2026

Core Lightning urges node operators to upgrade to version 26.06.8 after attacks on older Lightning Network nodes. The update fixes critical flaws, but details and impact are undisclosed.

Core Lightning has issued urgent warnings to node operators using version 26.06.7 or earlier of its Bitcoin Lightning Network software, after reports of attackers targeting unpatched nodes. The development team has not revealed which vulnerabilities are being exploited or if any funds have been lost, but strongly advises upgrading to version 26.06.8, released on September 22. This latest update addresses several critical flaws, including bugs that could crash nodes, exhaust memory, or cause loss of funds during channel closures. To prevent attackers from reverse-engineering the vulnerabilities, some tests were withheld from the release while operators update. The warnings come amid a wave of AI-generated vulnerability reports reviewed since August, and follow other security incidents affecting Lightning Network tools in 2026. Node operators are strongly urged to upgrade immediately to safeguard their funds, though the full extent of the threat remains undisclosed.