Core Lightning vulnerabilities spark urgent security update

Core Lightning vulnerabilities demand immediate offline mode

Developers of the open‑source Lightning Network implementation Core Lightning have disclosed a suite of vulnerabilities that could allow remote code execution and denial‑of‑service attacks. Operators who postpone the pending patch are urged to switch their nodes to offline mode, preserving activity while severing network connections.

According to Reuters, the upcoming release addresses the flaws and introduces hardened authentication checks. The advisory notes that exploitation risk may climb ↑ 15% if nodes remain online without the fix.

“Running in offline mode is a temporary safeguard, not a long‑term solution,” said a Core Lightning maintainer.

Stakeholders are reminded that similar security lapses have emerged during the pandemic when remote work expanded the attack surface.