Lnbits vulnerabilities
We track 2 vulnerabilities in Lnbits products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 6, 2025.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Lnbits vulnerabilities
- 7.5 High severity
lnbits: Server-Side Request Forgery
LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback U
- 8.1 High severity
lnbits: Improper Check for Unusual or Exceptional Conditions
LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout (about 30s) lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a total