Ethereum clients Teku and Besu have released versions 26.10.3 and 26.10.2, respectively, removing trust in eMudhra-related certificates from Docker images. Researchers found cryptographic flaws that could expose private keys belonging to eight eMudhra intermediate certificate authorities. Teku said an attacker between a validator and a connected service could impersonate the service and redirect block fees to the attacker's address. Teku said default mainnet nodes are unaffected and no exploitation has been reported so far.