ACINQ, the team behind the Eclair Lightning node software, released two updates in five days to address several security flaws. Version 0.14.4, released on October 15, 2026, blocks forged requests that could use browser authentication credentials to trigger channel management actions or unauthorized payments. Version 0.14.5, released on October 20, 2026, also fixes vulnerabilities linked to peer behavior that could allow funds to be stolen or payments disrupted. No loss of funds has been confirmed, and operators should upgrade their node to version 0.14.5. Dashboards that access the API directly will now need an intermediary server because browser-originated requests are rejected.
Source: Read the original article


