Distrust compromised intermediate certificates in crypto/x509

CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

Bulletin ID: 2026-150-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/24/2026 20:00 PM PDT

Summary:

AWS-owned TLS trust bundles are certificate stores used by AWS services to validate outbound TLS connections to customer-configured endpoints, including identity provider endpoints, origin servers, and webhook destinations. We identified CVE-2026-111943, a cryptographic key-generation issue affecting an external Certificate Authority (eMudhra/emSign), whose intermediate CA private keys were trivially recoverable due to catastrophic entropy failures in P-384 key generation. Eight intermediate CA private keys (six TLS, two code-signing) were generated with scalar values of small integers, making them mathematically recoverable without specialized tooling. Please note, customers whose TLS clients enforce certificate revocation checking (OCSP or CRL fail-closed) are not affected, as the issuing CA revoked the affected intermediates on 2026-10-18, and the cross-signing CA revoked its copies on 2026-10-19.

Affected roots:

• AAA Certificate Services (SPKI SHA-256: bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3)
• emSign Root TLS CA – G3 (SPKI SHA-256: c619e4780ed8e0abeda24ad732567de4383a7ea941338f6d1a7d1b49ac792fe9)
• emSign ECC Root CA – G3 (SPKI SHA-256: 8d417db2dd8bf5e3084d1e3f196d583849d81bdd4c00c70b9d39369e96b8c782)

Current Mitigation Status:

• Root removal changes for the shared AWS trust store were merged and deployed to the live version set on 2026-10-21.
• AWS SDK for Python (boto3 / botocore) was updated and released to PyPI as version 1.43.117.
• Amazon CloudFront is deploying root removal from the edge CA bundle by the target date of 2026-10-28.
• Amazon Linux 2 and Amazon Linux 2023 updates are available now. Customers should update the ca-certificates package: sudo yum update ca-certificates. Please follow ALAS CVE-2026-113470 and CVE-2026-111943 for more details.
• Amazon Corretto has released updated JDK versions across all supported lines with the affected roots removed.
• Bottlerocket is publishing updated AMIs targeted for 2026-10-26, with the latest AMI parameters updated in commercial regions by 2026-10-28.
• Application Load Balancer is removing the affected roots from the trust store used to validate identity provider endpoints for OIDC and JWT authentication. Application Load Balancers with OIDC or JWT authentication enabled are being updated between 2026-10-29 and 2026-10-31, and newly created Application Load Balancers are protected by 2026-11-02. Customers using OIDC or JWT authentication on Application Load Balancers are being notified through AWS Health. If an identity provider certificate chains to one of the affected roots, replace it with a certificate from an AWS-trusted Certificate Authority by 2026-10-28.
• AWS Security Token Service (STS) and Amazon Cognito have completed deploying trust store updates, removing the affected roots used to validate outbound TLS connections to identity provider endpoints.
• RDS for SQL Server is updating managed hosts to remove the affected roots, targeted for 2026-10-30. No customer action is required.
• EMR is releasing updated versions targeted for 2026-10-31. Customers should update when available.

Mitigation Guidance:

• Amazon CloudFront: Customers whose origin server certificates chain to one of the three affected roots may experience TLS validation failures as AWS removes the roots from the CloudFront edge CA bundle. Impacted customers have been notified through their Personal Health Dashboard.
• Elastic Load Balancing (Application Load Balancer): AWS is notifying customers whose Application Load Balancers use OIDC or JWT authentication through AWS Health. If your identity provider endpoint presents a certificate that chains to one of the affected roots, replace it with a certificate from an AWS-trusted Certificate Authority by 2026-10-28.
• Amazon Corretto: Customers should upgrade to the latest versions, which are now available for download.
• Amazon Linux 2 and Amazon Linux 2023: Update for ca-certificates package is available now: sudo yum update ca-certificates
• AWS SDK for Python (boto3 / botocore): AWS SDK for Python (boto3 / botocore): Update to botocore version 1.43.117 or later.
• Bottlerocket: Customers running Bottlerocket-based workloads on Amazon Elastic Kubernetes Service (EKS) or Amazon Elastic Container Service (ECS) on AMI versions at or below v1.67.0 are affected until updated AMIs are available. Customers should apply the interim per-node trust override using the Bottlerocket API:

Interim per-node trust override

apiclient apply <<'EOF'
# emSign ECC Root CA - C3 (O=eMudhra Inc)
# SHA-256 BC:4D:80:9B:15:18:9D:78:DB:3E:1D:8C:F4:F9:72:6A:79:5D:A1:64:3C:A5:F1:35:8E:1D:DB:0E:DC:0D:7E:B3
[settings.pki.emsign-ecc-c3]
trusted = false
data = "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"

# emSign ECC Root CA - G3 (O=eMudhra Technologies Limited)
# SHA-256 86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B
[settings.pki.emsign-ecc-g3]
trusted = false
data = "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUNUakNDQWRPZ0F3SUJBZ0lLUFBZSHFXaHdEdHFMaERBS0JnZ3Foa2pPUFFRREF6QnJNUXN3Q1FZRFZRUUdFd0pKVGpFVE1CRUcKQTFVRUN4TUtaVzFUYVdkdUlGQkxTVEVsTUNNR0ExVUVDaE1jWlUxMVpHaHlZU0JVWldOb2JtOXNiMmRwWlhNZ1RHbHRhWFJsWkRFZwpNQjRHQTFVRUF4TVhaVzFUYVdkdUlFVkRReUJTYjI5MElFTkJJQzBnUnpNd0hoY05NVGd3TWpFNE1UZ3pNREF3V2hjTk5ETXdNakU0Ck1UZ3pNREF3V2pCck1Rc3dDUVlEVlFRR0V3SkpUakVUTUJFR0ExVUVDeE1LWlcxVGFXZHVJRkJMU1RFbE1DTUdBMVVFQ2hNY1pVMTEKWkdoeVlTQlVaV05vYm05c2IyZHBaWE1nVEdsdGFYUmxaREVnTUI0R0ExVUVBeE1YWlcxVGFXZHVJRVZEUXlCU2IyOTBJRU5CSUMwZwpSek13ZGpBUUJnY3Foa2pPUFFJQkJnVXJnUVFBSWdOaUFBUWpwUXk0TFJMMUtQT3hzdDNpQWhLQW5qbGZTVTJmeVNVMFdYVHN1d1ljCjU4QnlyK2l1TCtGQlZJY1VxRXF5Nkh5QzVsdHF0ZHl6ZGM2TEJ0Q0dJNzlHMVk0UFB3VDAxeHlTZnZhbFk4TDFYNDR1VDZFWUdRSXIKTWdxQ1pIMFdrOUdqUWpCQU1CMEdBMVVkRGdRV0JCUjhYUUtFRTlUTWlwdUJ6aGNjTGlrZW5FaGpRakFPQmdOVkhROEJBZjhFQkFNQwpBUVl3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFLQmdncWhrak9QUVFEQXdOcEFEQm1BakVBdnZOaHp3SVFIV1NWQjdnWWJvaUZCUytECkNCZVF5aCtLVE9nTkczcXhyZFdCQ1Vmdk82d0lCSHhjbWJIdFJ3ZlNBakVBbmJwVi9LbEs2TzN0NW5ZQlFudkkrR0RaalZHTFZUdjcKakh2clpRbkQrSmJOUjZpQzhoWlZkeVIrRWhDVkJDeWoKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo="




 = 
 =