🚨 URGENT: Update to LND 0.18.5-beta ASAP!

A critical bug has been discovered in versions of LND older than 0.18.5-beta (a critical bug related to erroneous invoice state transitions, check release notes). This vulnerability could be potentially exploited to drain your Lightning wallet. The bug has been patched in LND 0.18.5-beta.

:warning: Please update immediately to protect your funds!


:zap: Updating LND on Umbrel Before the Official Release

Since it took over a week for an official Umbrel LND 0.18.5-beta release, here’s a simple guide to update your Lightning Node manually before the official Umbrel release in the future.

:pushpin: Step-by-Step Guide:

:one: SSH into your Umbrel

Open a terminal and connect to your Umbrel node:

ssh umbrel@your-umbrel-ip

(Replace your-umbrel-ip with your actual Umbrel node IP.)


:two: Pull the latest LND Docker image

Download the latest version of LND from Docker Hub:

sudo docker pull lightninglabs/lnd:v0.18.5-beta

(Replace v0.18.5-beta with the latest available version if needed.)


:three: Verify the Docker image digest

Run the following command to get the SHA-256 hash:

sudo docker inspect --format='{{index .RepoDigests 0}}' lightninglabs/lnd:v0.18.5-beta

(Again, do not forget to check the desired version.)

This, in our current case, will return something like:

lightninglabs/lnd@sha256:2b560c9beb559c57ab2f2da1dfed80d286cf11a6dc6e4354cab84aafba79b6f6

Take note of the SHA-256 hash, as you’ll need it in the next step.


:four: Edit docker-compose.yml

Edit the Lightning Node’s docker-compose.yml file:

sudo nano ~/umbrel/app-data/lightning/docker-compose.yml

Find the line that starts with:

lightninglabs/lnd:

Modify it to match the latest version and hash. In this example, it should look like:

lightninglabs/lnd:v0.18.5-beta@sha256:2b560c9beb559c57ab2f2da1dfed80d286cf11a6dc6e4354cab84aafba79b6f6

docker-compose.yml

:floppy_disk: Save the changes:

  • Press CTRL + X
  • Press Y to confirm
  • Press Enter to save

:five: Restart your Lightning Node

umbreld client apps.restart.mutate --appId lightning

:white_check_mark: Your LND is now up to date even before the official umbrelOS release!

2 Likes

Umbrel has already updated to LND 0.18.5-beta. Updating through the Umbrel UI should be sufficient to get the latest version. :muscle:

1 Like

Yes, I am aware of that. :slightly_smiling_face: But we still may need this in the future.

“Since it took over a week for an official Umbrel LND 0.18.5-beta release (…)”

2 Likes

You’re absolutely right! The delay in the official release sometimes makes manual updates useful. Your guide is definitely a helpful resource for similar situations! :slightly_smiling_face:

1 Like

Great guide!