Skip to content
OpenAdvisories

Product · BTCPay Server

BTCPay Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-119757

    BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure

    BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND (Lightning Network Daemon) node. Attackers can use …

    BTCPay Server BTCPay Server