Update
Eclair v0.14.4 Blocks Malicious Browser Requests to Lightning API
ACINQ's Eclair v0.14.4 release blocks malicious webpages from issuing authenticated node commands through an operator's browser. The update requires direct browser interfaces to add a backend, affecting legitimate browser interfaces hosted at the same origin as the API. Ordinary command-line access remains unaffected, and the maintainers recommend upgrading to the new version.