Following the recent vulnerability in LNbits discovered on 8 November all operators must upgrade to LNbits 1.7.0 before running LNbits. Versions prior to 1.7.0 are affected, and funds running on prior versions of LNbits are at risk of being stolen.
Version 1.7.0 includes security fixes in response to this incident. As well as updating your LNbits instance, please take the recovery steps below. Credentials exposed before the upgrade may still give an attacker access afterwards.