Compromised emSign CA keys: update Electron, Node.js, uv and certifi

published 2026-10-20

An attacker holding the compromised eMudhra emSign intermediate CA keys can forge TLS certificates that your machine trusts. This allows intercepting HTTPS traffic from affected Electron apps, Node.js, uv and Python tools using certifi.

Fixed in: 2026.10.18

CVE: CVE-2026-115570

Source: GitHub Advisory

Am I affected?

You are affected if the installed version is older than 2026.10.18. Check the version you have and update to 2026.10.18 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1798 and your operating system.