Security

Security Updates

Critical

Upgrade to MyNode v0.3.52+ for Linux TCP vulnerability CVE-2026-98432

Please upgrade every MyNode device to v0.3.52 or newer as soon as possible. Don't wait for automatic upgrades or your next scheduled maintenance.

The vulnerability

CVE-2026-98432 is a memory safety flaw in how the Linux kernel handles new IPv4 TCP connections. It affects Linux kernels from 4.4 onward that don't include the fix, and those kernels are used across MyNode's supported devices.

What v0.3.52 does

  • Installs new Linux kernels during the upgrade where a fixed kernel is available, including on amd64 devices.
  • Adds mitigations for this issue on all platforms.
  • Warns on your device's home page if its running kernel is still missing the fix.

Other recent security improvements

This release also brings other recent improvements that make MyNode more secure, including:

  • Login and session handling
  • Access controls for apps and services
  • Verification of software downloads
  • An improved firewall

It also updates Bitcoin, LND, Lightning Terminal, BTCPay Server, and other apps to their latest versions.

How to upgrade

Upgrading via the Web Interface

Premium

  1. Open your MyNode device's Settings page.
  2. Click Check for updates to make sure the new version is available.
  3. Click Upgrade. Your device will upgrade and reboot.

Upgrading via Command Line

Community Edition and Premium

  1. Connect to your device over SSH from a terminal, and enter your MyNode password when prompted. If mynode.local doesn't work, use your device's IP address instead. 
    ssh admin@mynode.local
  2. Run the upgrade. It can take a while, so stay connected until it finishes and you're back at the command prompt. 
    sudo /usr/bin/mynode_upgrade.sh
  3. Reboot your device. 
    sudo mynode-reboot
  4. After it restarts, reconnect and confirm the version is 0.3.52 or newer. 
    cat /usr/share/mynode/version

Upgrading by Re-flashing your SD Card

Premium and Community Edition

You can also write a fresh copy of the latest MyNode image to your SD card, or to your OS drive on a PC. Your Bitcoin and Lightning data is saved on the external drive and is not lost, but some apps may need to be re-installed.

  1. Shut down your device using the button on the Settings page.
  2. Remove the SD card and flash it with the latest image from the download page. See the flashing guide for details.
  3. Put the SD card back in your device and power it on.
  4. Log in with the default password, bolt, and change it. Re-flashing resets your password, and your device may get a new IP address.

After upgrading

Check your device's home page and follow any kernel warning shown there. Some devices need an OS package upgrade and reboot. Raspberry Pi 4 and 5 devices have mitigations in place until a fixed kernel is available. Devices on an OS that no longer receives kernel updates will be told to reflash with the latest image.

For more detail, see the upgrade guide. If you need help, please contact support.