Core Lightning confirms multiple vulnerabilities, prepares security update

Core Lightning, an open-source implementation of Bitcoin’s Lightning Network, has confirmed multiple vulnerabilities and urged node operators to install a forthcoming security update. On Thursday, Core Lightning said it had been assessing a high volume of AI-generated Common Vulnerabilities and Exposures (CVE) reports and found that several are real.

The project told operators not to shut down their nodes completely, but to restart them with “--offline,” which prevents payments from entering, leaving or routing through the node. In a subsequent post, Core Lightning clarified that upgrading is its primary recommendation, while restarting with --offline is an alternative for operators who have not upgraded. The guidance gives operators an alternative for protecting their nodes until they upgrade, without shutting down the underlying software entirely.

(Original synthesis pending human/AI review — generated by the stub provider by selecting real sentences from the source material, not by writing new analysis or commentary.)