LND Update Closes Demonstrated Linux Attack Route Through Lightning Nodes

Lightning Labs has released updates to LND that disable Multipath TCP (MPTCP) by default, closing a demonstrated attack route through Lightning nodes on Linux systems. The vulnerability allowed malicious actors to exploit MPTCP functionality to compromise node operators. While the LND update mitigates the immediate attack vector, operators must still apply patched Linux kernels to address the underlying vulnerability at the operating system level.