EUVD-2026-117807

BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND Lightning Network Daemon node. Attackers can use the exposed macaroon to gain full contro...