Core Lightning v26.06.9 released with security fixes and payment bug repair

Core Lightning has released version 26.06.9, addressing critical security flaws and a bug in Bitcoin payments. The update, published on Oct. 7, includes fixes for a regression in version 26.06.8 that could delay channel traffic on busy nodes. Operators using version 26.06.8 are encouraged to upgrade following the previous fix for a revoked-channel penalty flaw in version 26.06.7.

In version 26.06.8, routine messages counted against a CPU budget for gossip queries, potentially throttling peers and delaying channel traffic. Version 26.06.9 reserves this budget exclusively for gossip queries, eliminating the cause of throttling. Additionally, the update addresses a payment contract issue where a channel shutting down could lead to lost funds if a payment deadline was reached. The new version now force-closes the channel in such cases, protecting forwarded funds.

Other enhancements include enforcing limits on runes used for authorizing calls, ensuring restricted runes cannot create unrestricted ones or relist blacklisted runes. The listconfigs command now masks sensitive values, and the setconfig command prevents configuration injection through persistent options.

While the fixes are available immediately, security tests have been temporarily withheld to complicate exploit development. Nodes that have run master cannot downgrade to a 26.06.x release due to database schema changes. Users are urged to upgrade to version 26.06.9 as soon as practical.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.