Core Lightning developers urged node operators to upgrade signed binaries or take nodes offline while keeping technical details embargoed for two weeks. The warning ends support for previous releases, including version 26.04, given known risks. Multiple AI-generated CVE reports arrived from several sources over roughly 10 days starting August 13, requiring human validation before developers could treat them as vulnerabilities. Blockstream shipped CLN versions 26.04 in April and 26.06 in June, with version 26.09 on the third-quarter roadmap. No evidence of exploitation in the wild has been reported at this stage.
Source: Read the original article
