Vulnerability Database

318,638

Total vulnerabilities in the database

CVE-2020-26895

Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver, or payment-sender). The impact is a loss of funds in certain situations.

  • Published: Oct 21, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-26895
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
lightning_network_daemon_project / lightning_network_daemon 0.10.0-beta_rc2 0.10.0-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.10.0-beta_rc3 0.10.0-beta_rc3.x
lightning_network_daemon_project / lightning_network_daemon 0.10.0-beta_rc4 0.10.0-beta_rc4.x
lightning_network_daemon_project / lightning_network_daemon 0.10.0-beta_rc5 0.10.0-beta_rc5.x
lightning_network_daemon_project / lightning_network_daemon 0.10.0-beta_rc6 0.10.0-beta_rc6.x
lightning_network_daemon_project / lightning_network_daemon 0.10.0-beta_rc1 0.10.0-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.9.2-beta 0.9.2-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.9.1-beta 0.9.1-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.9.1-beta_rc1 0.9.1-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.9.0-beta 0.9.0-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.9.0-beta_rc1 0.9.0-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.9.0-beta_rc2 0.9.0-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.9.0-beta_rc3 0.9.0-beta_rc3.x
lightning_network_daemon_project / lightning_network_daemon 0.9.0-beta_rc4 0.9.0-beta_rc4.x
lightning_network_daemon_project / lightning_network_daemon 0.8.2-beta 0.8.2-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.8.2-beta_rc1 0.8.2-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.8.2-beta_rc2 0.8.2-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.8.1-beta 0.8.1-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.8.0-beta 0.8.0-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.8.0-beta_rc1 0.8.0-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.8.0-beta_rc2 0.8.0-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.8.0-beta_rc3 0.8.0-beta_rc3.x
lightning_network_daemon_project / lightning_network_daemon 0.7.1-beta 0.7.1-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.7.1-beta_rc1 0.7.1-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.7.1-beta_rc2 0.7.1-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.7.0-beta_rc3 0.7.0-beta_rc3.x
lightning_network_daemon_project / lightning_network_daemon 0.7.0-beta 0.7.0-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.7.0-beta_rc1 0.7.0-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.7.0-beta_rc2 0.7.0-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.6.1-beta 0.6.1-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.6.1-beta_rc1 0.6.1-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.6.1-beta_rc2 0.6.1-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.6-beta_rc3 0.6-beta_rc3.x
lightning_network_daemon_project / lightning_network_daemon 0.6-beta_rc4 0.6-beta_rc4.x
lightning_network_daemon_project / lightning_network_daemon 0.6-beta 0.6-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.6-beta_rc1 0.6-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.6-beta_rc2 0.6-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.5.2-beta 0.5.2-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.5.1-beta_rc3 0.5.1-beta_rc3.x
lightning_network_daemon_project / lightning_network_daemon 0.5.1-beta_rc4 0.5.1-beta_rc4.x
lightning_network_daemon_project / lightning_network_daemon 0.5.1-beta 0.5.1-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.5.1-beta_rc1 0.5.1-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.5.1-beta_rc2 0.5.1-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.5-beta 0.5-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.5-beta_rc1 0.5-beta_rc1.x
lightning_network_daemon_project / lightning_network_daemon 0.5-beta_rc2 0.5-beta_rc2.x
lightning_network_daemon_project / lightning_network_daemon 0.4-beta 0.4-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.4.1-beta 0.4.1-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.4.2-beta 0.4.2-beta.x
lightning_network_daemon_project / lightning_network_daemon 0.1.1-alpha 0.1.1-alpha.x
lightning_network_daemon_project / lightning_network_daemon 0.2-alpha 0.2-alpha.x
lightning_network_daemon_project / lightning_network_daemon 0.2.1-alpha 0.2.1-alpha.x
lightning_network_daemon_project / lightning_network_daemon 0.3-alpha 0.3-alpha.x
lightning_network_daemon_project / lightning_network_daemon 0.1-alpha 0.1-alpha.x