Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:btcpayserver:btcpayserver:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

BTCPay Server: LND node macaroon information disclosure (CVE-2026-119757)

BTCPay Server versions prior to 2.4.2 are vulnerable to an unauthenticated information disclosure flaw allowing remote attackers to steal LND node macaroon files for full administrative control and fund theft.

BTCPay Server cve-2026-119757 information-disclosure cryptocurrency vulnerability
1t 1c