# 🚨 URGENT: Update to LND 0.18.5-beta ASAP!

**URL:** <https://community.umbrel.com/t/urgent-update-to-lnd-0-18-5-beta-asap/21482>\
**Category:** Bitcoin and Lightning\
**Created:** [February 19, 2025, 8:47pm UTC](https://community.umbrel.com/t/urgent-update-to-lnd-0-18-5-beta-asap/21482 "2025-02-19T20:47:55Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Django](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/django/32/5795_2.png) [@Django](https://community.umbrel.com/u/Django)\
**Post date:** [February 19, 2025, 8:47pm UTC](https://community.umbrel.com/t/urgent-update-to-lnd-0-18-5-beta-asap/21482/1 "2025-02-19T20:47:55Z")

</div>

A **critical bug** has been discovered in versions of LND older than **0.18.5-beta** (a critical bug related to erroneous invoice state transitions, check [release notes](https://github.com/lightningnetwork/lnd/releases/tag/v0.18.5-beta)). This vulnerability **could be potentially exploited to drain your Lightning wallet**. The bug has been **patched** in LND **0.18.5-beta**.

⚠ **Please update immediately to protect your funds!**

* * *

## ⚡ Updating LND on Umbrel Before the Official Release

Since it took over a week for an official Umbrel LND 0.18.5-beta release, here’s a simple guide to update your Lightning Node manually before the official Umbrel release in the future.

## **📌 Step-by-Step Guide:**

### **1️⃣ SSH into your Umbrel**

Open a terminal and connect to your Umbrel node:

```auto
ssh umbrel@your-umbrel-ip

```

_(Replace `your-umbrel-ip` with your actual Umbrel node IP.)_

* * *

### **2️⃣ Pull the latest LND Docker image**

Download the latest version of LND from Docker Hub:

```auto
sudo docker pull lightninglabs/lnd:v0.18.5-beta

```

_(Replace `v0.18.5-beta` with the latest available version if needed.)_

* * *

### **3️⃣ Verify the Docker image digest**

Run the following command to get the SHA-256 hash:

```auto
sudo docker inspect --format='{{index .RepoDigests 0}}' lightninglabs/lnd:v0.18.5-beta

```

_(Again, do not forget to check the desired version.)_

This, in our current case, will return something like:

```auto
lightninglabs/lnd@sha256:2b560c9beb559c57ab2f2da1dfed80d286cf11a6dc6e4354cab84aafba79b6f6

```

Take note of the SHA-256 hash, as you’ll need it in the next step.

* * *

### **4️⃣ Edit `docker-compose.yml`**

Edit the Lightning Node’s `docker-compose.yml` file:

```auto
sudo nano ~/umbrel/app-data/lightning/docker-compose.yml

```

Find the line that starts with:

```auto
lightninglabs/lnd:

```

Modify it to match the latest version and hash. In this example, it should look like:

```auto
lightninglabs/lnd:v0.18.5-beta@sha256:2b560c9beb559c57ab2f2da1dfed80d286cf11a6dc6e4354cab84aafba79b6f6

```

![docker-compose.yml](https://canada1.discourse-cdn.com/flex030/uploads/getumbrel/original/2X/a/abbc38c4c926a12ad037ca4112d46d170bb2e333.png)

💾 **Save the changes:**

- **Press** `CTRL + X`
- **Press** `Y` to confirm
- **Press** `Enter` to save

* * *

### **5️⃣ Restart your Lightning Node**

```auto
umbreld client apps.restart.mutate --appId lightning

```

* * *

### ✅ **Your LND is now up to date even before the official umbrelOS release!**

---

<div class="post-metadata">

**Author:** ![denny](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/denny/32/6330_2.png) [@denny](https://community.umbrel.com/u/denny)\
**Post date:** [February 19, 2025, 9:56pm UTC](https://community.umbrel.com/t/urgent-update-to-lnd-0-18-5-beta-asap/21482/2 "2025-02-19T21:56:45Z")

</div>

Umbrel has already updated to LND 0.18.5-beta. Updating through the Umbrel UI should be sufficient to get the latest version. 💪

 ![image](https://canada1.discourse-cdn.com/flex030/uploads/getumbrel/original/2X/0/0b4de98852cd74e1917e19d9829bd225ceaa3398.png)

---

<div class="post-metadata">

**Author:** ![Django](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/django/32/5795_2.png) [@Django](https://community.umbrel.com/u/Django)\
**Post date:** [February 19, 2025, 10:11pm UTC](https://community.umbrel.com/t/urgent-update-to-lnd-0-18-5-beta-asap/21482/3 "2025-02-19T22:11:09Z")

</div>

> [@Django](#):
>
> Since it took over a week for an official Umbrel LND 0.18.5-beta release

Yes, I am aware of that. 🙂 But we still may need this in the future.

“Since it took over a week for an official Umbrel LND 0.18.5-beta release (…)”

---

<div class="post-metadata">

**Author:** ![denny](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/denny/32/6330_2.png) [@denny](https://community.umbrel.com/u/denny)\
**Post date:** [February 19, 2025, 10:35pm UTC](https://community.umbrel.com/t/urgent-update-to-lnd-0-18-5-beta-asap/21482/4 "2025-02-19T22:35:06Z")

</div>

You’re absolutely right! The delay in the official release sometimes makes manual updates useful. Your guide is definitely a helpful resource for similar situations! 🙂

---

<div class="post-metadata">

**Author:** ![CoinJoiner](https://avatars.discourse-cdn.com/v4/letter/c/ecd19e/32.png) [@CoinJoiner](https://community.umbrel.com/u/CoinJoiner)\
**Post date:** [March 2, 2025, 12:48pm UTC](https://community.umbrel.com/t/urgent-update-to-lnd-0-18-5-beta-asap/21482/5 "2025-03-02T12:48:07Z")

</div>

Great guide!