Bitcoin Lightning wallet service Alby confirmed a critical vulnerability affecting Alby Hub versions v1.7.0 through v1.18.5, released before August 2025. If the Hub management API is accessible from the public internet, attackers can gain unauthorized access and transfer funds.
Alby said one user has been confirmed affected. Versions v1.19.0, released on August 29, 2025, and later are not affected. The company urged affected users to upgrade immediately to v1.24.0, restrict public access to the management interface, and update their unlock password. It also advised users to avoid exposing Hub to the public internet and to run it in a private network via the NWC protocol.
Alby Confirms Critical Vulnerability in Older Hub Versions
Disclaimer: The content provided on Phemex News is for informational purposes only. We do not guarantee the quality, accuracy, or completeness of the information sourced from third-party articles. The content on this page does not constitute financial or investment advice. We strongly encourage you to conduct you own research and consult with a qualified financial advisor before making any investment decisions.