Core Lightning Warns Unpatched Nodes Targeted, Urges Upgrade to 26.06.8

The notable part is the disclosure gap: a fix shipped in 26.06.8 with no CVE name and no confirmed losses, which leaves operators unable to judge exposure beyond their own version number. Because the flaw concerns channel closing, the risk sits with node runners holding funds in active channels rather than with the wider network. Whether unpatched nodes are actually drained, and whether the project names the vulnerability later, are the open questions worth tracking.