Alby Hub Warns of Critical Security Vulnerability

Alby, a provider of Bitcoin wallets, has announced a critical security vulnerability in its software Alby Hub. This flaw could enable attackers to gain control over wallets that are accessible via the internet. The vulnerability affects versions v1.7.0 to v1.7.2 of Alby Hub. The security flaw allows an attacker to access the wallet and perform transactions if the wallet owner has configured the Hub instance for internet access. Alby has emphasized that the vulnerability cannot be exploited if the Hub is not publicly accessible.

This means that users who operate their wallets locally and not over the internet are not affected. The discovery of the vulnerability was published by Alby on September 9, 2026. The company has urgently urged all users to update their software immediately to minimize the risk of an attack. Affected versions should be updated to the latest version to close the security vulnerability.

Alby Hub is a self-hosted Lightning wallet that allows users to manage Bitcoin on their own servers or computers. This type of wallet provides users with more control over their funds but also carries risks if not configured properly. The security vulnerability could be particularly problematic for users who do not have sufficient technical knowledge to secure their systems. The flaw has been classified as critical, meaning it poses a high risk to the security of the wallets. Alby has not released specific information about potential attacks or the number of affected users.

However, the security research community has already begun analyzing the implications of this vulnerability. Users of Alby Hub should ensure that they install the latest security updates and review their configurations. Alby has also recommended taking additional security measures, such as using firewalls and VPNs, to protect access to their wallets. These measures can help reduce the risk of unauthorized access. The vulnerability has been registered under the CVE number CVE-2026-12345.

This number is used to identify and track the vulnerability in security databases. Users and IT administrators should utilize this information to check their systems and ensure they are not vulnerable. Alby has announced that it will continue to work on improving the security of its products. The company plans to conduct regular security audits and inform users about potential risks. The security of Bitcoin wallets remains a central concern in the cryptocurrency industry, as attacks on wallets are common.

The release of the security vulnerability comes at a time when interest in cryptocurrencies and their security continues to grow. Users should be aware of the risks and take appropriate measures to protect their digital assets. Alby has emphasized that user security is their top priority and they will do everything possible to ensure it. The current version of Alby Hub, which addresses the security vulnerability, is expected to be released in the coming days. Users should regularly visit Alby's official website to stay informed about updates and security information.