{"id":"CVE-2020-26896","details":"Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-chain HTLC was already settled before releasing the preimage. In the case of a hash-and-amount collision with an invoice, the preimage for an expected payment was instead released. A malicious peer could have deliberately intercepted an HTLC intended for the victim node, probed the preimage through a colluding relayed HTLC, and stolen the intercepted HTLC. The impact is a loss of funds in certain situations, and a weakening of the victim's receiver privacy.","modified":"2026-07-08T05:56:38.492811562Z","published":"2020-10-21T02:15:12.737Z","database_specific":{"unresolved_ranges":[{"source":"CPE_RANGE","vendor_product":"lightning_network_daemon_project:lightning_network_daemon","cpes":["cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"0.11.0"}]},{"source":"CPE_STRING","vendor_product":"lightning_network_daemon_project:lightning_network_daemon","cpes":["cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:-:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0.11.0-NA"},{"last_affected":"0.11.0-NA"}]}]},"references":[{"type":"ADVISORY","url":"https://gist.github.com/ariard/6bdeb995565d1cc292753e1ee4ae402d"},{"type":"ADVISORY","url":"https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002855.html"},{"type":"FIX","url":"https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002857.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/lightningnetwork/lnd","events":[{"introduced":"247b7530caf08a555ffd56f81019031bc1af6565"},{"last_affected":"fc12656a1a62e5d69430bba6e4feb8cfbaf21542"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc1:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc2:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc3:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc4:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0.11.0-beta_rc1"},{"last_affected":"0.11.0-beta_rc1"},{"introduced":"0.11.0-beta_rc2"},{"last_affected":"0.11.0-beta_rc2"},{"introduced":"0.11.0-beta_rc3"},{"last_affected":"0.11.0-beta_rc3"},{"introduced":"0.11.0-beta_rc4"},{"last_affected":"0.11.0-beta_rc4"}]}}],"versions":["0.11.0-beta_rc1","0.11.0-beta_rc2","0.11.0-beta_rc3","0.11.0-beta_rc4","v0.11.0-beta.rc4","v0.11.0-beta.rc3","v0.11","v0.11.0-beta.rc2","v0.11.0-beta.rc1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26896.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N"}]}