Bitcoin Core Lightning Docker Users Face Security Update Glitch

Bitcoin Lightning maintainers have discovered that four Docker image tags served unpatched files while incorrectly claiming to be version v26.06.7. This issue occurred between August 28 and September 1, leaving some users with a false sense of security regarding their node updates.

Even if your node reports that it is running version v26.06.7, the software might still be vulnerable. Because the startup version display is unreliable in this case, operators must verify their image digests to ensure they are actually running the patched code. The faulty images were a result of an automated build process that pulled from an incorrect placeholder.

Maintainers have now replaced the bad images and removed the incorrect references. If your local image digest does not match the official corrected values, you need to pull the update again. Checking the hash is currently the only way to confirm you have successfully patched your node.

This security release is currently under a 14 day embargo to protect users from potential attacks. Operators should follow the official guidance to verify their installations immediately. Do not rely on GitHub source archives for this build, as they do not currently match the specific v26.06.7 security release.