-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0247
============================================================

Advisory-ID:  0xCERT-2026-0247
Severity:     High
Published:    2026-10-16T00:34:18.000Z
Updated:      2026-10-16T01:07:18.484Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0247

Title: Lighthouse v8.2.2: security release for Ethereum node operators

Summary
- -------
Lighthouse v8.2.2 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Details
- -------
Summary
Lighthouse v8.2.2 (released 2026-10-16) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Affected
- - Lighthouse (sigp/lighthouse) versions before v8.2.2

From the release notes
## Summary
⚠️ Lighthouse v8.2.2 is a high-priority release containing fixes for several security vulnerabilities.
All mainnet beacon node users should upgrade as soon as practical to receive the security fixes in this release.
## Upgrade Notes
No special action is required beyond upgrading. This release does not contain a database schema migration or any breaking CLI changes.
If upgrading from a release prior to v8.2.1, please see release notes for v8.2.1 and v8.2.0:
- - https://github.com/sigp/lighthouse/releases/tag/v8.2.1
- - https://github.com/sigp/lighthouse/releases/tag/v8.2.0
## Update Priority
This table provides priorities for which classes of users should update particular components.
User Class
Beacon Node
Validator Client
Staking Users
High
Low
Non-Staking Users
High
- ---
See Update Priorities for more information about this table.
## Security Content
We can now rev

Recommended actions
- - Upgrade Lighthouse to v8.2.2 or later
- - Check the release notes for any coordinated upgrade deadline or required configuration change

Source & attribution
This 0xCERT advisory relays the Lighthouse v8.2.2 release notes: https://github.com/sigp/lighthouse/releases/tag/v8.2.2. Refer to the upstream project for the authoritative record and any follow-up security advisories.

References
- ----------
- - https://github.com/sigp/lighthouse/releases/tag/v8.2.2
- - GHSA-qfwj-vfxf-92j2
- - GHSA-hmxj-32vh-65vr
- - GHSA-2hv7-gw8g-gpq5

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmroIw4JEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmeySgWw4QfPyqasgAY8HEK0rodqih7klFa4QBmH
YrsZ9xYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAACjXwD/egf0c2k1sXfGL+We
TRmT/DsbMxJ/oV6xgE6FOXuOgLkBAIUM90zI/4VMECslYrhUi6JxjjTpfRMF
oAgimILBUjkC
=WMMM
-----END PGP SIGNATURE-----