Core Lightning recommends unupgraded nodes run offline; a fix version has not yet been released.

TechFlow reports that on August 27, according to The Defiant, the maintenance team for Core Lightning (CLN), an implementation of the Bitcoin Lightning Network, notified node operators that if they cannot upgrade to the upcoming patched release, they should run their nodes offline using the --offline parameter. The team stated it will release binaries containing fixes for multiple disclosed vulnerabilities, but details of the specific vulnerabilities will remain confidential for another two weeks; as of press time, the related binaries and security advisory have not yet been made public.

CLN previously stated that it had received several AI-generated CVE reports over the past 10 days, and the team is working with open-source contributors to verify, categorize, and fix them. Its latest publicly released version is v26.06.6, which was released on July 22, while the v26.09 release, originally scheduled for the end of September, continues to proceed as planned.