OverviewRisk ModelProPrediction MarketsBetaLearn
OverviewSentiment LabOn-Chain LabMarket Lab

Learn / Guide · Published October 20, 2026

Eclair v0.14.5: what Lightning node operators should know

By Sahil Kaila · Alphabit founder and risk-model builder. About the author

ACINQ recommends upgrading to Eclair v0.14.5, a security-hardening release. Here is what operators can verify and how the prior browser-API change fits in.

ACINQ released Eclair v0.14.5 on October 20, 2026. The maintainers describe it as a security-hardening patch and recommend upgrading because some issues can be exploited by malicious nodes. The public release notes do not describe the individual fixes, so this article does not speculate about their details. Read the v0.14.5 release notice.

What operators can verify from the release notice

  • v0.14.5 is the current release shown by the Eclair project on October 20.
  • ACINQ recommends that Eclair node operators upgrade because some issues may be exploitable by malicious nodes.
  • The release is described as compatible with earlier Eclair versions, and the notice says channels do not need to be closed for the upgrade.
  • The release notes do not disclose enough detail to attribute a specific vulnerability, impact, or affected configuration to v0.14.5.

Operators should follow Eclair’s official upgrade procedure, verify release artifacts and signatures as described by the project, and consult the complete release notes. The general recommendation applies to Eclair deployments; it is not an instruction for every Lightning implementation.

How this relates to the v0.14.4 browser API change

The previous v0.14.4 release, published October 15, documented a specific browser security hardening change: Eclair’s API rejects requests carrying an Origin header. The release notes explained that this blocks direct browser use of the API; command-line tools such as curl and eclair-cli are unaffected because they do not send that header. That is a separately documented change in v0.14.4, not a detail disclosed for v0.14.5. Read v0.14.4 release notes.

For operators using a browser-based front end with the Eclair API, check that front end’s current compatibility and place a server-side layer in front of the API if needed. Eclair’s own README warns that its JSON API should not be accessible from the outside world.

Who needs to act?

If you operate Eclair, review the latest release notes and upgrade using the project’s normal procedure. If you only use a standard Bitcoin wallet, the v0.14.5 notice does not identify a wallet action. This is an Eclair software update, not a Bitcoin consensus change or a network-wide upgrade.

Release checked October 20, 2026. Version status can change; confirm the project’s current release page before upgrading.

Sources: Eclair v0.14.5 release · v0.14.5 release notes · v0.14.4 release notes · Eclair README