CVE-2020-26895

Published: Oct 21, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver, or payment-sender). The impact is a loss of funds in certain situations.

Affected (54)

Products: Lightning Network Daemon Project: Lightning Network Daemon

Lightning Network Daemon Project

1 product

Lightning Network Daemon

Configuration A

54 vulnerable

Vulnerable Software	Affected Versions
Lightning Network Daemon Project Lightning Network Daemon	Version 0.1.1 alpha
Lightning Network Daemon Project Lightning Network Daemon	Version 0.10.0 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.10.0 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.10.0 beta_rc3
Lightning Network Daemon Project Lightning Network Daemon	Version 0.10.0 beta_rc4
Lightning Network Daemon Project Lightning Network Daemon	Version 0.10.0 beta_rc5
Lightning Network Daemon Project Lightning Network Daemon	Version 0.10.0 beta_rc6
Lightning Network Daemon Project Lightning Network Daemon	Version 0.1 alpha
Lightning Network Daemon Project Lightning Network Daemon	Version 0.2.1 alpha
Lightning Network Daemon Project Lightning Network Daemon	Version 0.2 alpha
Lightning Network Daemon Project Lightning Network Daemon	Version 0.3 alpha
Lightning Network Daemon Project Lightning Network Daemon	Version 0.4.1 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.4.2 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.4 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5.1 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5.1 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5.1 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5.1 beta_rc3
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5.1 beta_rc4
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5.2 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.5 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.6.1 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.6.1 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.6.1 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.6 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.6 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.6 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.6 beta_rc3
Lightning Network Daemon Project Lightning Network Daemon	Version 0.6 beta_rc4
Lightning Network Daemon Project Lightning Network Daemon	Version 0.7.0 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.7.0 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.7.0 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.7.0 beta_rc3
Lightning Network Daemon Project Lightning Network Daemon	Version 0.7.1 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.7.1 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.7.1 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.8.0 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.8.0 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.8.0 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.8.0 beta_rc3
Lightning Network Daemon Project Lightning Network Daemon	Version 0.8.1 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.8.2 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.8.2 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.8.2 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.9.0 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.9.0 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.9.0 beta_rc2
Lightning Network Daemon Project Lightning Network Daemon	Version 0.9.0 beta_rc3
Lightning Network Daemon Project Lightning Network Daemon	Version 0.9.0 beta_rc4
Lightning Network Daemon Project Lightning Network Daemon	Version 0.9.1 beta
Lightning Network Daemon Project Lightning Network Daemon	Version 0.9.1 beta_rc1
Lightning Network Daemon Project Lightning Network Daemon	Version 0.9.2 beta