-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0246
============================================================

Advisory-ID:  0xCERT-2026-0246
Severity:     High
Published:    2026-10-16T00:32:56.000Z
Updated:      2026-10-16T01:07:17.865Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0246

Title: Lighthouse v8.2.1: security release for Ethereum node operators

Summary
- -------
Lighthouse v8.2.1 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Details
- -------
Summary
Lighthouse v8.2.1 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Affected
- - Lighthouse (sigp/lighthouse) versions before v8.2.1

From the release notes
## Summary
⚠️ Lighthouse v8.2.1 is a high-priority release containing fixes for several security vulnerabilities, as well as fixes and optimisations.
All mainnet beacon node users should upgrade as soon as practical to receive the security fixes in this release.
This release also fixes several bugs relating to partial data columns, which are enabled by default on the Hoodi and Sepolia testnets.
## Upgrade Notes
No special action is required beyond upgrading. This release does not contain a database schema migration or any breaking CLI changes.
## 🧩 Partial Data Columns
Lighthouse v8.2.1 includes several fixes for partial data columns (EIP-8136), which are enabled by default on Hoodi and Sepolia.
These fixes improve the handling of cached partial data, prevent headers for already-imported blocks from being cached and re-gossiped, and reject received cells that conflict with cells

Recommended actions
- - Upgrade Lighthouse to v8.2.1 or later
- - Check the release notes for any coordinated upgrade deadline or required configuration change

Source & attribution
This 0xCERT advisory relays the Lighthouse v8.2.1 release notes: https://github.com/sigp/lighthouse/releases/tag/v8.2.1. Refer to the upstream project for the authoritative record and any follow-up security advisories.

References
- ----------
- - https://github.com/sigp/lighthouse/releases/tag/v8.2.1
- - GHSA-g3g5-x568-qvqx
- - GHSA-3fm2-7wx2-vp46

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmroJkEJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmdo6X1wy231RQriIiXY1Ayf70PYOZcG3dHfhSOK
8XPMMhYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAABjsgEA+mxVeu1HBePNIz7V
GPv0Q1NO6WG39x2PGazV3XB4aJkA/Ri+x29jqOCNY8IzAmcQ8+V1NANng2Dy
OxbTHRcfhY8A
=bq46
-----END PGP SIGNATURE-----