Core Lightning confirms vulnerabilities and readies security update

Core Lightning has confirmed that multiple vulnerabilities affect its software and is preparing a security update, according to Cointelegraph. The project advised node operators who do not install the forthcoming update to switch to offline mode. This setting allows their nodes to remain active while disconnecting them from the network. The guidance is intended for operators who choose not to apply the update once it becomes available. Core Lightning did not provide further details in the supplied information about the vulnerabilities, their impact, or the update’s release timing. The development is relevant to users monitoring infrastructure connected to the Lightning Network, although no direct effect on the prices or prospects of CORE, LIGHT, NOT or ORE was stated. Operators should follow Core Lightning’s official security guidance when deciding how to manage affected nodes.