Mertiva.
USD
English
EnglishSvenskaNorskDanskSuomi
Bitcoin

Core Lightning 26.06.9 fixes peer throttling and strengthens node handling

The October 7 release corrects a gossip regression and includes security fixes. Maintainers recommend upgrading and have temporarily withheld some tests to give operators time.

2 min read
Published by Mertiva Original source publication
Orange beads move along an open white lane beside a metal mesh filter over a separate channel.
Conceptual editorial illustration, not a photograph of the reported event.

Key facts

  • Normal peer traffic no longer consumes the gossip-query budget.
  • Signed reproducible ARM binaries join the release assets.
  • The changelog documents additional recovery and configuration fixes.

A maintenance release with operational consequences

Core Lightning published version 26.06.9 on October 7 and strongly recommended that operators upgrade. The maintainers say it fixes vulnerabilities alongside a regression introduced in 26.06.8, where busy nodes could throttle ordinary peer traffic and delay channel communication.

Only gossip queries now count toward the relevant CPU budget. The release also adds signed, reproducible arm64 and armv7 packages for supported Ubuntu versions. Maintainers explain that some security tests are temporarily withheld to slow the creation of exploits while operators update.

Recovery and access controls

The versioned changelog records fixes for recovery from static channel backups, malformed message handling and crashes during channel or splice processing. It also tightens restrictions on administrative permission tokens and prevents sensitive configuration values from appearing in listconfigs output.

These are concrete changes to node behavior rather than a claim that Lightning payments are risk-free. Operators should read the compatibility notes before switching versions, especially when they have been running development builds. The changelog carries an October 6 entry, while GitHub’s publication timestamp is October 7; this article uses the public release date. No loss estimate or exploitation claim is inferred from the existence of the fixes.

Primary sources

Reporting is based on the linked primary sources. Company statements are attributed to their authors; they are not independent test results.

  1. Core Lightning maintainers — Core Lightning v26.06.9 release
  2. Core Lightning maintainers — Versioned 26.06.9 changelog

Source links checked 16 Oct 2026

Understand the background

Your first Bitcoin transfer: the checks that matterWhere you keep your crypto matters as much as what you buy

Information to support your research. Not personal investment, tax or legal advice. Risk & disclaimer

More on this topic

View all news

A global market. Local rules.

Check the authority responsible for your country and the legal entity providing the service. Keep purchase, sale, swap and transfer records. Your tax residence and the product you use determine which guidance applies; the links below are general starting points.

ESMA investor resourcesOECD tax resources