Lamassu — Vulnerabilities & Security Advisories 3

Lamassu is an open-source Bitcoin ATM software that enables operators to deploy cryptocurrency kiosks for buying and selling digital assets. Historically, it has been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and authentication flaws. The software's security characteristics include its reliance on hardened Linux systems and network isolation, though past incidents have demonstrated that misconfigurations and unpatched components can lead to complete compromise of ATM operations. With three CVEs documented, the project continues to address security challenges while maintaining its core function in the cryptocurrency ecosystem.