Core Lightning Urges Urgent Node Patch Following Security Attacks

The Core Lightning development team has issued an urgent security alert, instructing node operators to update to version 26.06.8 immediately. Reported on October 1, 2026, the vulnerability is being actively exploited in versions 26.06.7 and older, threatening Bitcoin held in routing channels. The patch addresses multiple flaws identified by the Bitcoin Red Team and independent researchers. To mitigate risks, developers have temporarily withheld specific test cases and advised against using experimental features like zero-conf channels with untrusted peers.