Cloudflare updates address compromised eMudhra certificates

{
  "id": "b8f18081096bc9418273f07321d8bfc1ea6bb1fd21b8e18350de5dee018ebe99",
  "url": "https://blog.cloudflare.com/emudhra-certificate-compromise/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Cloudflare updates address compromised eMudhra certificates",
    "summary": "Cloudflare released security updates for Cloudflare One clients and Cloudflare Tunnel and deployed mitigations across several products after learning that private keys for eight eMudhra intermediate certificates were compromised.",
    "evidence": "We have released updates for the Cloudflare One Clients, also known as WARP or the 1.1.1.1 app, and Cloudflare Tunnel, also known as cloudflared.",
    "products": [
      {
        "name": {
          "value": "Cloudflare One Client",
          "evidence": "Cloudflare One Client: Upgrade to:"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v2.5.7 (Android)",
            "evidence": "Cloudflare One Client: Upgrade to: v2.5.7 (Android), v1.12.7 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          },
          {
            "value": "v1.12.7 (iOS)",
            "evidence": "Cloudflare One Client: Upgrade to: v2.5.7 (Android), v1.12.7 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          },
          {
            "value": "Windows Desktop (2026.8.2115.0)",
            "evidence": "Cloudflare One Client: Upgrade to: v2.5.7 (Android), v1.12.7 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          },
          {
            "value": "macOS (2026.8.2115.0)",
            "evidence": "Cloudflare One Client: Upgrade to: v2.5.7 (Android), v1.12.7 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          },
          {
            "value": "Linux (2026.8.2115.0)",
            "evidence": "Cloudflare One Client: Upgrade to: v2.5.7 (Android), v1.12.7 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "1.1.1.1 app",
          "evidence": "1.1.1.1 app: Upgrade to:"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v6.38.11 (Android)",
            "evidence": "1.1.1.1 app: Upgrade to: v6.38.11 (Android), v6.31.8 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          },
          {
            "value": "v6.31.8 (iOS)",
            "evidence": "1.1.1.1 app: Upgrade to: v6.38.11 (Android), v6.31.8 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          },
          {
            "value": "Windows Desktop (2026.8.2115.0)",
            "evidence": "1.1.1.1 app: Upgrade to: v6.38.11 (Android), v6.31.8 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          },
          {
            "value": "macOS (2026.8.2115.0)",
            "evidence": "1.1.1.1 app: Upgrade to: v6.38.11 (Android), v6.31.8 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          },
          {
            "value": "Linux (2026.8.2115.0)",
            "evidence": "1.1.1.1 app: Upgrade to: v6.38.11 (Android), v6.31.8 (iOS), Windows Desktop (2026.8.2115.0), macOS (2026.8.2115.0), Linux (2026.8.2115.0)"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "Cloudflare Tunnel (cloudflared)",
          "evidence": "Cloudflare Tunnel (cloudflared) Upgrade to 2026.10.2."
        },
        "prerequisites": [
          {
            "value": "For container deployments, update and redeploy the fixed image",
            "evidence": "For container deployments, update and redeploy the fixed image"
          }
        ],
        "fixed_versions": [
          {
            "value": "2026.10.2",
            "evidence": "Cloudflare Tunnel (cloudflared) Upgrade to 2026.10.2."
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-cloudflare-blog",
  "document_id": 23420,
  "published_at": "2026-10-20T22:20:16+00:00"
}