-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0184
============================================================

Advisory-ID:  0xCERT-2026-0184
Severity:     Medium
Published:    2026-10-01T04:49:35.000Z
Updated:      2026-10-08T22:46:39.569Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0184

Title: Lighthouse v8.2.3: security release for Ethereum node operators

Summary
- -------
Lighthouse v8.2.3 (released 2026-10-01) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Details
- -------
Summary
Lighthouse v8.2.3 (released 2026-10-01) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Affected
- - Lighthouse (sigp/lighthouse) versions before v8.2.3

From the release notes
## Summary
This medium-priority release contains fixes for security vulnerabilities and is recommended for all mainnet users.
If you are running a node on Sepolia you'll need v8.3.0-rc.0 instead: https://github.com/sigp/lighthouse/releases/tag/v8.3.0-rc.0
## Update Priority
This table provides priorities for which classes of users should update particular components.
User Class
Beacon Node
Validator Client
Staking Users
Medium
Low
Non-Staking Users
Medium
- ---
See Update Priorities for more information about this table.
## Security Content
This section will be updated with security advisories as they are made public. We are not disclosing the security content of this release in order to give users time to upgrade.
## Known Issues
Data column backfill can OOM, particularly on Gnosis chain. This is fixed in v8.3.0-rc.0 and will be included in v8.3.0 shortly. We do not recommend

Recommended actions
- - Upgrade Lighthouse to v8.2.3 or later
- - Check the release notes for any coordinated upgrade deadline or required configuration change

Source & attribution
This 0xCERT advisory relays the Lighthouse v8.2.3 release notes: https://github.com/sigp/lighthouse/releases/tag/v8.2.3. Refer to the upstream project for the authoritative record and any follow-up security advisories.

References
- ----------
- - https://github.com/sigp/lighthouse/releases/tag/v8.2.3

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrIRpUJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmeVg9nNCRJkDhxbtqk/Vj37+CHP0tkw5OP/tCMP
eGyI7RYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAABREwEAyVWRzgjbtpiq8sTp
gLc/N0Vp4RW2EEsyyEPiY95DxrMBAJNXiID5IVDrypyLBFAotMLNBiiGGnYY
qt02ke0T/LwF
=ayuk
-----END PGP SIGNATURE-----