Core Lightning released version 26.06.8 on September 22 to patch multiple vulnerabilities responsibly reported by the Bitcoin Red Team and twelve other contributors. The fixes address flaws that could crash sender nodes, exhaust memory in the REST interface, and a channel-closing bug exposing users to fund losses through penalties. Some tests were deliberately withheld to make it harder for attackers to reverse-engineer and exploit the vulnerabilities before operators upgraded. In August, Core Lightning had already released version 26.06.7 after assessing a high volume of AI-generated vulnerability reports.
Source: Read the original article

