Alby said a critical vulnerability affects Alby Hub versions v1.7.0 through v1.18.5 if the management API is exposed to the public internet, creating a path for unauthorized access and possible fund transfers. The issue was highlighted in a post by Bitcoin News on X, which said Alby had confirmed the flaw. Alby added that one user is currently known to have been affected, while versions v1.19.0 and later are not impacted. The company advised affected users to restrict public access to the management interface, upgrade immediately to v1.24.0, and change their unlock password after updating. Alby also said the latest release fixes multiple issues reported by Bitcoin Team Red, Project Loupe, and other researchers.
Alby has confirmed a critical vulnerability in Alby Hub versions v1.7.0 through v1.18.5, according to a post shared by Bitcoin News on X. If the management API is exposed to the public internet, an attacker could gain unauthorized access and move funds.
Alby said one user is currently known to have been affected. The company added that Alby Hub v1.19.0 and later versions are not impacted.
For users running affected versions, Alby recommended restricting public access to the management interface, upgrading immediately to v1.24.0, and changing the unlock password after the update. Alby also said the latest version fixes multiple issues reported by Bitcoin Team Red, Project Loupe, and other researchers.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
