{"type":"post","id":"emudhra-security-advisory-eight-intermediate-ca-keys-were-bb9034","slug":"emudhra-security-advisory-eight-intermediate-ca-keys-were-bb9034","title":"eMudhra Security Advisory: eight intermediate CA keys were recoverable, so anyone could mint a trusted cert for any site.","description":"Vercel has published remediation guidance after private keys for eight eMudhra intermediate certificate authorities were found recoverable.","retrieval_nugget":"Vercel has published remediation guidance after private keys for eight eMudhra intermediate certificate authorities were found recoverable. Its managed platform has been updated or is rolling updates, but teams still own trust stores embedded in custom images, pinned packages, external runners, and end-of-life Node.js 20 deployments.","published_at":"2026-10-27","updated_at":"2026-10-27","record_date":"2026-10-27","date_kind":"published_at","topics":["agent-security","sandbox"],"entities":["Vercel","eMudhra","emSign","Node.js","Python certifi","Vercel Sandbox"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"Vercel says it updated its managed infrastructure and runtimes, while identifying self-managed runtimes and Node.js 20.x as remaining exposure requiring action.","prior_refs":["memory:711a223a-da53-8984-a5b8-c4371710e831","memory:253b42ad-ea1d-843f-a3c1-2a9064849c49"],"source_url":"https://vercel.com/kb/bulletin/emudhra-security-advisory-compromised-intermediate-ca-keys","source_urls":["https://vercel.com/kb/bulletin/emudhra-security-advisory-compromised-intermediate-ca-keys"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:emudhra-security-advisory-eight-intermediate-ca-keys-were-bb9034","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/emudhra-security-advisory-eight-intermediate-ca-keys-were-bb9034/","markdown":"https://newruntime.com/posts/emudhra-security-advisory-eight-intermediate-ca-keys-were-bb9034.md","json":"https://newruntime.com/posts/emudhra-security-advisory-eight-intermediate-ca-keys-were-bb9034.json"},"next_reads":[{"type":"topic","path":"/topics/agent-security/","url":"https://newruntime.com/topics/agent-security/","title":"Agent Security","reason":"Explore the agent-security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agent-security.md","json_url":"https://newruntime.com/topics/agent-security.json"},{"type":"topic","path":"/topics/sandbox/","url":"https://newruntime.com/topics/sandbox/","title":"Sandbox","reason":"Explore the sandbox topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/sandbox.md","json_url":"https://newruntime.com/topics/sandbox.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}