eMudhra Certificate Authority Incident: Status and Guidance for JetBrains Products - The JetBrains Blog

JetBrains is responding to an industry-wide eMudhra certificate authority incident reported on October 17, 2026, in which weaknesses in the generation of private keys for eight intermediate CAs could allow attackers to create apparently trusted certificates. The issue affects JetBrains products that rely on Java-based or bundled certificate trust stores, although JetBrains reports no known exploitation against its customers. Security fixes are already available for many products, including JetBrains IDEs, Gateway, Toolbox App, Rider, ReSharper, JetBrains Runtime, YouTrack, Hub, Datalore, and Junie CLI, while updates for TeamCity, Kotlin tools, IDE Services, MPS, some Qodana components, and command-line tools remain in progress. Customers are advised to install product and operating-system updates, update Java runtimes where applicable, and follow product-specific mitigation guidance; if updates cannot be applied, they may remove the affected emSign ECC Root CA – G3 and AAA Certificate Services roots from Java trust stores rather than disabling certificate validation. JetBrains is also updating its cloud infrastructure, requiring no customer action except for TeamCity Cloud users with self-hosted build agents, who should verify and update their agents’ Java runtimes.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.