Core Lightning: Unupgraded nodes become attack targets, prompt to upgrade to 26.06.8

According to monitoring by Bitcoin News, Core Lightning stated that attackers are targeting nodes still running version 26.06.7 and earlier. The patch released on September 22, version 26.06.8, fixed a channel closure issue that could jeopardize funds, as well as vulnerabilities that could lead to crashes and memory exhaustion.

The project has not disclosed the names of the vulnerabilities used by the attackers, nor has it reported any theft of funds. Node operators who have not yet upgraded are becoming the targets of the attacks.