Core Lightning confirms multiple vulnerabilities, prepares security update

Core Lightning advised operators to use offline mode if they do not install the forthcoming update, keeping their nodes active but disconnected.

Core Lightning, an open-source implementation of Bitcoin’s Lightning Network, has confirmed multiple vulnerabilities and urged node operators to install a forthcoming security update.

On Thursday, Core Lightning said it had been assessing a high volume of AI-generated Common Vulnerabilities and Exposures (CVE) reports and found that several are real. The project told operators not to shut down their nodes completely, but to restart them with “--offline,” which prevents payments from entering, leaving or routing through the node.

In a subsequent post, Core Lightning clarified that upgrading is its primary recommendation, while restarting with --offline is an alternative for operators who have not upgraded. 

Read more