BTCPay Server vulnerabilities
We track 1 vulnerability in BTCPay Server products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest BTCPay Server vulnerabilities
- 9.8 Critical severity
BTCPay Server: Insufficiently Protected Credentials
BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND (Lightning Network Daemon) node. Attackers can use t