Lighthouse v8.2.2: security release for Ethereum node operators
Lighthouse v8.2.2 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.
Vuln-watch · relayed from an upstream security release; see Source & attribution below
Summary
Lighthouse v8.2.2 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.
Affected
- Lighthouse (sigp/lighthouse) versions before v8.2.2
From the release notes
## Summary ⚠️ Lighthouse v8.2.2 is a high-priority release containing fixes for several security vulnerabilities. All mainnet beacon node users should upgrade as soon as practical to receive the security fixes in this release. ## Upgrade Notes No special action is required beyond upgrading. This release does not contain a database schema migration or any breaking CLI changes. If upgrading from a release prior to v8.2.1, please see release notes for v8.2.1 and v8.2.0: - https://github.com/sigp/lighthouse/releases/tag/v8.2.1 - https://github.com/sigp/lighthouse/releases/tag/v8.2.0 ## Update Priority This table provides priorities for which classes of users should update particular components. User Class Beacon Node Validator Client Staking Users High Low Non-Staking Users High --- See Update Priorities for more information about this table. ## Security Content We can now rev
Recommended actions
- Upgrade Lighthouse to v8.2.2 or later
- Check the release notes for any coordinated upgrade deadline or required configuration change
Source & attribution
This 0xCERT advisory relays the Lighthouse v8.2.2 release notes: https://github.com/sigp/lighthouse/releases/tag/v8.2.2. Refer to the upstream project for the authoritative record and any follow-up security advisories.
References
- https://github.com/sigp/lighthouse/releases/tag/v8.2.2
- GHSA-qfwj-vfxf-92j2
- GHSA-hmxj-32vh-65vr
- GHSA-2hv7-gw8g-gpq5
OpenPGP-signed. The signed text of this advisory verifies against the 0xCERT key CCC7 D9EC 9415 723D.
Published 2026-10-16 · last updated 2026-10-16
curl -s https://www.0xcert.com/pgp.asc | gpg --import && curl -s https://www.0xcert.com/advisory/0xCERT-2026-0247/signed.txt | gpg --verify