CVE-2021-41593: lightning_network_daemon_project lightning_network_daemon
Vulnerability summary
CVE-2021-41593 is a high (CVSS 8.6) vulnerability in lightning_network_daemon_project lightning_network_daemon. EPSS estimates a 1.93% chance of exploitation in the next 30 days, higher than 80% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Timeline
- 04-10-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.93%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.93% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundExploit Reference (lists.linuxfoundation.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Lightning_network_daemon_project1 product
- lightning_network_daemon< 0.11.0 | 0.11.0 | 0.11.0:beta | 0.11.0:beta_rc1 | 0.11.0:beta_rc2 | 0.11.0:beta_rc3 | 0.11.0:beta_rc4 | 0.11.1:beta | 0.11.1:beta_rc1 | 0.11.1:beta_rc2 | 0.11.1:beta_rc3 | 0.11.1:beta_rc4 | 0.11.1:beta_rc5 | 0.12.0:beta | 0.12.0:beta_rc1 | 0.12.0:beta_rc2 | 0.12.0:beta_rc3 | 0.12.0:beta_rc4 | 0.12.0:beta_rc5 | 0.12.0:beta_rc6 | 0.12.1:beta | 0.12.1:beta_rc1 | 0.12.1:beta_rc2 | 0.12.1:beta_rc3 | 0.12.1:beta_rc4 | 0.12.1:beta_rc5 | 0.12.1:beta_rc6 | 0.13.0:beta | 0.13.0:beta_rc1 | 0.13.0:beta_rc2 | 0.13.0:beta_rc3 | 0.13.0:beta_rc4 | 0.13.0:beta_rc5 | 0.13.1:beta | 0.13.1:beta_rc1 | 0.13.1:beta_rc2 | 0.13.2:beta | 0.13.3:beta_rc2
1 vendor · 1 product
References
6 links- lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.htmlX Refsource MISCMailing ListVendor Advisory
- lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.htmlX Refsource MISCMailing ListVendor Advisory
- github.com/lightningnetwork/lnd/blob/master/docs/release-notes/release-notes-0.13.3.mdX Refsource MISCRelease NotesThird Party Advisory
- lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003264.htmlX Refsource MISCExploitMailing ListVendor Advisory