Coralogix Security Advisory: eMudhra Certificate Update
Update from October 23, 2026
What happened?
On October 17, 2026, the private keys of eight intermediate certificate authorities operated by eMudhra (emSign) were reported compromised. Certificates issued through these CAs can no longer be trusted, and major browsers, operating systems and language runtimes have since blocked them. This is an industry-wide issue, not specific to Coralogix.
Is the Coralogix platform affected?
No. Coralogix endpoints and internal services do not use eMudhra or emSign certificates. Coralogix managed endpoints and services are not affected, and data continues to flow as usual. We have not identified any impact to customer data.
What do I need to do?
Out of an abundance of caution, we recommend reviewing your environment for the Coralogix components you run (e.g., the OpenTelemetry integration, Coralogix Operator, Terraform provider, Lambda layers and shippers) and upgrading them to the latest version, in line with your update policy.
| Component | Recommended version |
|---|---|
| Kubernetes integration (otel-integration Helm chart) | 0.0.362 |
| OpenTelemetry Collector Contrib | v0.163.2 |
| Coralogix Operator | v2.16.0 (FIPS: v2.16.0-fips) |
| Coralogix Terraform provider | v3.22.0 |
| Coralogix CLI (cx-cli) | v0.1.28 |
| AWS Lambda telemetry extension | Layer 39 |
| Supervised collector and supervised eBPF profiler | 0.17.0 |
| CloudWatch Metric Streams transformation Lambda | firehose-metrics-transformer.zip (published 23 October 2026) |
| Coralogix OpenTelemetry Collector (CDOT) | v0.5.18 |
| coralogix-aws-shipper | 1.4.20 |
| AWS Lambda auto-instrumentation layers (Python, Node.js, Java) | Python: Layer 36NodeJS: Layer 43Java: Layer 20 |
The potential exposure is limited to scenarios where an attacker is already positioned between the customer environment and Coralogix, such as through a compromised proxy, DNS hijacking, or an untrusted network. Updating the affected components removes the compromised certificates from their trusted CA stores.
If you have any questions or need help upgrading, our Support team is here to help. Reach out through in-app chat and mention “Security advisory eMudhra” and the required component.
