[critical] eMudhra intermediate CA private keys compromised

Thu, 22 Oct 2026 23:38:20 GMT

Eight eMudhra Global TLS intermediate CA private keys were found to be cryptographically weak / recoverable (researcher report Oct 18). Mozilla, Chrome, Apple and Microsoft blocked the intermediates; eMudhra revoked them Oct 19 and the ECC root was distrusted as a precaution. Downstream runtimes that ship their own trust stores (Go, Node.js, Electron, Python certifi, curl, etc.) needed emergency CA-bundle updates so they stop trusting the compromised chains.

Status: live · Patch: partial · Fixed in: Electron 44.9.1 / 43.8.1 / 42.11.16, Go 1.27.3 / 1.26.10, Node.js 22.23.4 / 24.22.1 / 26.12.1, Python certifi 2026.10.19, NSS 3.131.1, Java 27.0.1.0.2 / 25.0.5.0.2 / 21.0.13.0.2 / 17.0.21.0.2 / 11.0.33.0.2 / 8u511+ (CVE-2026-91403), Deno 2.9.8, rustls-webpki 0.103.16 / webpki-roots 1.0.10, pip 26.2.2 / uv 0.13.4 / sigstore 4.5.1 / conda 26.9.4 / pixi 0.82.1 (Python ecosystem), Ubuntu/Debian/Alpine/Fedora/Arch ca-certificates updates (see tracker), Docker Desktop 4.96.2, mitmproxy 12.3.0

Latest updates:

2026-10-22: Tracker lists patched releases across distros, language runtimes and tools; Bun, Erlang certifi and Bottlerocket still pending. mitmproxy 12.3.0 drops eMudhra CAs. (source)
2026-10-22: eMudhra says a flaw in its April 30 2025 key generation ceremony produced a second set of weak keys, and those were the ones published to root stores; root cause still under investigation, replacement certs being issued to customers. (source)
2026-10-22: Internet Freedom Foundation says it has written to eMudhra, India’s Controller of Certifying Authorities and CERT-In asking for a fix. (source)

CVEs: CVE-2026-111943, CVE-2026-91403

pwn.watch: Certifi incident updates

[critical] eMudhra intermediate CA private keys compromised