BTCPay Server 2.4.7 Security Release Adds Urgency for Self-Hosted Merchants
Summary
BTCPay Server’s 2.4.7 release, published in late October, includes security fixes covering reported issues of varying severity. The disclosure does not establish that the vulnerabilities were exploited. Operators running self-hosted payment servers should review the official upgrade guidance, back up configurations, patch through a tested process, and check payment and payout flows and access controls. Updating the application alone does not address risks such as outdated operating systems, compromised accounts, or misconfigured plugins.
