CVE-2020-26896: High severity pytorch lightning vulnerability
Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-chain HTLC was already settled before releasing the preimage. In the case of a hash-and-amount collision with an invoice, the preimage for an expected payment was instead released. A malicious peer could have deliberately intercepted an HTLC intended for the victim node, probed the preimage through a colluding relayed HTLC, and stolen the intercepted HTLC. The impact is a loss of funds in certain situations, and a weakening of the victim's receiver privacy.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-26896?
CVE-2020-26896 is considered a high-severity vulnerability due to its potential to allow incorrect handling of HTLC preimages.
How do I fix CVE-2020-26896?
To fix CVE-2020-26896, upgrade LND to version 0.11.0 or later.
What type of systems are affected by CVE-2020-26896?
CVE-2020-26896 affects versions of the Lightning Network Daemon prior to 0.11.0, including beta releases.
What is the main issue described in CVE-2020-26896?
The main issue in CVE-2020-26896 is the failure to verify that off-chain HTLCs were settled before releasing HTLC preimages.
Does CVE-2020-26896 affect both on-chain and off-chain transactions?
Yes, CVE-2020-26896 impacts both on-chain and off-chain transactions by introducing risks during the settlement process.