Github release notes lists the bypass of two factor auth but I suppose there might be an additional critical vulnerability:
https://github.com/btcpayserver/btcpayserver/releases/tag/v2.4.2
florian
npub1kl…27gxc
2026-08-07 18:42:15 UTC
in reply to nevent1q…u76c
Author Public Key
npub1klr0dy2ul2dx9llk58czvpx73rprcmrvd5dc7ck8esg8f8es06qs427gxcPublished at
2026-08-07 18:42:15 UTCEvent JSON
{
"id": "3118fa2369ca03d49be0f8c7a006ece626fe1cd4069866f2106794d0bbe42878",
"pubkey": "b7c6f6915cfa9a62fff6a1f02604de88c23c6c6c6d1b8f62c7cc10749f307e81",
"created_at": 1786128135,
"kind": 1,
"tags": [
[
"e",
"5e2a67d8fe651c5e057c362c4be36e19ac2ec0af6cc1846f028befd40ff289b6",
"",
"root"
],
[
"p",
"50d94fc2d8580c682b071a542f8b1e31a200b0508bab95a33bef0855df281d63"
],
[
"r",
"wss://nos.lol/",
"write"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://haven.slidestr.net/",
"write"
],
[
"r",
"wss://insta-relay.apps3.slidestr.net/",
"read"
],
[
"r",
"wss://haven.slidestr.net/inbox",
"read"
],
[
"client",
"Primal Web"
]
],
"content": "Github release notes lists the bypass of two factor auth but I suppose there might be an additional critical vulnerability:\nhttps://github.com/btcpayserver/btcpayserver/releases/tag/v2.4.2",
"sig": "618a01e0310ee5c63dc6beb514453b269a5d32e44e34f3ab63c0d8e95c48d54bf3f61122bf6efe45000bba2eaf05a363e933686d78fe25744a0c7345b25a8ae4"
}