Core Lightning has not publicly disclosed which specific vulnerabilities are being exploited in the active attacks or whether any node operators have lost funds.

From the articleCore Lightning Warns Bitcoin Node Operators to Upgrade After Attack ReportsAlso in Is Your Bitcoin on Lightning at Risk? Depends on Who Runs the Node, Core Lightning Urges Upgrades After Attacks Target Old Nodes, Bitcoin Lightning security alert issued as attackers target older Core Lightning nodes, Core Lightning Warns of Attacks on Unpatched Nodes