Core Lightning nodes can keep crashing after an upgrade until a stored trigger is removed

A disclosed flaw in Core Lightning, software for Bitcoin’s Lightning payment network, can leave a node crashing on restart even after an upgrade because the malicious announcement that triggered it remains on disk. Researcher Nishant Bansal’s October 24 disclosure identifies versions v25.02 through v26.04 as affected. Once the announcement is saved, restarting reloads the same trigger. Bansal says the operator must manually remove the offending record to restore the node. Bitcoin Optech highlighted the issue on October 30 , but the preventive patch is months old. Core Lightning merged PR #9082 on April 24 and shipped the fix in v26.04.1 on April 25 . The October disclosure explains a flaw whose preventive fix had been available since April. Channel announcements tell nodes about connections in the Lightning routing graph.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CryptoSlate.