Core Lightning Confirms Flaws, Urges Node Operators to Update

Core Lightning is one of the main open-source implementations of Bitcoin’s Lightning Network, which enables faster, lower-cost payments through channels operating away from the base blockchain. Its nodes route payments and manage liquidity, making software security critical to both operators’ funds and network reliability. Vulnerabilities in widely used node software can expose individual deployments to attack and potentially disrupt payment routing across the broader ecosystem.

Core Lightning developers confirmed multiple security vulnerabilities, including a critical flaw reportedly uncovered with assistance from artificial intelligence, and said a security update was being prepared. Node operators were urged to install the release as soon as it becomes available. Until they can upgrade, operators may restart nodes in offline mode, allowing the daemon to remain running while cutting network exposure and reducing the risk of exploitation.