Skip to content
OpenAdvisories

Vendor

BTCPay Server

10 known vulnerabilities.

Products

btcpayserver/btcpayserver 9 BTCPay Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-119757

    BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure

    BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND (Lightning Network Daemon) node. Attackers can use …

    BTCPay Server BTCPay Server