# Core Lightning Ships a Security Release and Withholds the Patches for Two Weeks

The fixes answer three weeks of vulnerability reports produced by a wave of AI-assisted review across open-source Bitcoin projects, and developers say no fund losses have been confirmed.

- Published: 2026-08-29T05:48:58.855Z
- Canonical: https://polylog.news/crypto/2026-08-29/core-lightning-ships-a-security-release-and-withholds-the-pa
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Blockstream Blog](https://blog.blockstream.com/core-lightning-26-06-7/), [Rekt News](https://www.rekt.news/), [Blockstream Blog](https://blog.blockstream.com/blockstream-explorer-rebuilt/)

The Core Lightning team has released version 26.06.7 and recommended that every node runner upgrade. The release fixes vulnerabilities confirmed over the previous three weeks. Source-level detail stays private for 14 days, so that attackers…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-08-29/core-lightning-ships-a-security-release-and-withholds-the-pa (subscription information: https://polylog.news/pricing).