Infisical’s response to the eMudhra CA compromise

An eMudhra certificate authority incident, publicly disclosed on October 20, 2026, exposed derivable private keys for eight intermediate certificates, potentially allowing attackers to issue trusted certificates for any domain in systems relying on affected eMudhra or cross-signed Sectigo roots. Browser and operating system vendors blocked the certificates and eMudhra revoked them, but applications using independently bundled or outdated trust stores may remain vulnerable until updated. Infisical reported that it was not compromised, uses no eMudhra-issued certificates, and found no evidence of exploitation against its services or customers, though its products could previously trust the affected intermediates through runtime or operating-system trust stores. The company updated its cloud and dedicated deployments, released Infisical v0.167.0 and patched versions of its tools, integrations, Helm charts, and Go, Python, and Rust SDKs, while advising self-hosted users to upgrade affected components and refresh relevant Node.js, Go, Python, operating-system, and container trust stores.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.