High severity7.5NVD Advisory· Published Jan 31, 2020· Updated Jun 17, 2026

CVE-2019-12998

Description

c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

c-lightning/c-lightningdescription
ElementsProject/lightningllm-create
Range: <0.7.1

Patches

Vulnerability mechanics

References

github.com/ElementsProject/lightning/commits/masternvdPatchThird Party Advisory
lists.linuxfoundation.org/pipermail/lightning-dev/2019-September/002174.htmlnvdExploitMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000