Core Lightning tells node operators to upgrade after confirming security flaws
Core Lightning has confirmed multiple security vulnerabilities in its Bitcoin Lightning Network software and has urged node operators to install an upcoming security update or temporarily run their nodes offline. Core Lightning said Thursday that its developers had been reviewing a large number of AI-generated Common Vulnerabilities and Exposures reports and confirmed that several submissions identified real problems requiring fixes. The project advised operators to upgrade as its main recommendation. Operators who have not installed the security release can restart Core Lightning with the –offline option, which prevents the node from connecting to peers and stops payments from entering, leaving or routing through it. Core Lightning initially described the offline setting as a protective measure while fixes were being prepared, but later clarified that operators should prioritize upgrading once the patched software is available. Technical details about the newly confirmed vulnerabilities have not been made public. Core Lightning has not disclosed their severity, assigned public CVE identifiers or reported evidence that attackers have exploited the flaws. Core Lightning nodes can remain active without routing payments Using the –offline setting allows the Core Lightning daemon to remain active while disconnecting the node from the Lightning Network. Under the configuration, a node does not accept incoming peer connections or









