# Buildkite: Buildkite response to the eMudhra certificate compromise

> Buildkite status incident “Buildkite response to the eMudhra certificate compromise” on 2026-10-20: impact none (vendor’s label), 24 h, 4 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/buildkite/incidents/hnnlf9y36vt5
Last updated: 2026-10-21T22:43:04Z

- Impact (vendor’s label): none
- Status: resolved · edited after publishing
- Started: 2026-10-20 22:13 UTC · Resolved: 2026-10-21 22:38 UTC · Duration: 24 h
- Updates: 4
- [Vendor status page: https://stspg.io/yn3cmf9rh4rd](https://stspg.io/yn3cmf9rh4rd)
- [Company: Buildkite](https://rewindex.com/company/buildkite.md)

## Timeline of updates

- **investigating** 2026-10-20 22:13 UTC: The private keys for eight certificates issued by eMudhra, an external certificate authority, have been compromised. Software that still trusts these certificates may accept fraudulent HTTPS certificates. We’re updating the services that power Buildkite and preparing new CLI and Agent releases, which we expect to ship shortly. We’re also tracking fixes to the libraries and trust stores we depend on and will apply them as they become available. We’ll update this page with the new versions and any action customers need to take. Mozilla has published background on the compromise.
- **monitoring** 2026-10-20 23:25 UTC: We're continuing to monitor the situation, and are making releases to many of our components that run in customer infrastructure. At time of writing, we've released versions that distrust the affected eMudhra certificates for: - Buildkite agent: https://github.com/buildkite/agent: - v4.7.0: https://github.com/buildkite/agent/releases/tag/v4.7.0 - v3.138.2: https://github.com/buildkite/agent/releases/tag/v3.138.2 - Buildkite CLI: https://github.com/buildkite/cli/releases/tag/v3.64.2 - bktec: https://github.com/buildkite/test-engine-client/releases/tag/v3.3.1 We recommend updating to these versions to prevent exposure to the affected certificate providers. We will continue to issue updates for the other binaries we distribute, and are updating any internal services that are affected.
- **monitoring** 2026-10-21 05:07 UTC: We’ve finished updating the services that power Buildkite so they no longer trust the affected eMudhra certificates. No action is needed from customers for Buildkite hosted services. For components that run in customer infrastructure, we still recommend upgrading to the releases listed in our previous update (Buildkite agent v4.7.0 / v3.138.2, Buildkite CLI v3.64.2, and bktec v3.3.1). We’re continuing to release updates for the other binaries we distribute and will post them here as they ship.
- **resolved** 2026-10-21 22:38 UTC: All services that power Buildkite have been updated to distrust the affected certificates, and updated releases are available for the components we distribute that run in customer infrastructure: Buildkite agent: v4.7.0 and v3.138.2 Buildkite CLI: v3.64.2 bktec: v3.3.1 elastic-ci-stack-for-aws: v7.8.0 agent-stack-k8s: v0.52.0 We recommend updating to these versions to prevent exposure to the affected certificate providers.

## Rewindex changes for this incident

- 2026-10-20 23:33 UTC: [Incident updated: Buildkite response to the eMudhra certificate compromise](https://rewindex.com/change/r4bced361de0b8a.md)
- 2026-10-21 05:13 UTC: [Incident updated: Buildkite response to the eMudhra certificate compromise](https://rewindex.com/change/r53532e500eac4e.md)
- 2026-10-21 22:43 UTC: [Incident updated: Buildkite response to the eMudhra certificate compromise](https://rewindex.com/change/r9f656207ba442b.md)

## Cite this

Status incident (vendor impact label: none) posted by Buildkite, started 2026-10-20 22:13 UTC, resolved after 24 h, 4 update(s); edited after publishing.

- Canonical URL: https://rewindex.com/company/buildkite/incidents/hnnlf9y36vt5
- Citation: Buildkite, “Buildkite response to the eMudhra certificate compromise” (2026-10-20 22:13 UTC). Archived by Rewindex: https://rewindex.com/company/buildkite/incidents/hnnlf9y36vt5 (CC BY 4.0).
- Markdown link: `[Buildkite: Buildkite response to the eMudhra certificate compromise (2026-10-20)](https://rewindex.com/company/buildkite/incidents/hnnlf9y36vt5)`


---
Canonical: https://rewindex.com/company/buildkite/incidents/hnnlf9y36vt5 · Markdown: https://rewindex.com/company/buildkite/incidents/hnnlf9y36vt5.md · JSON: https://rewindex.com/api/v1/companies/buildkite/incidents/hnnlf9y36vt5 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T17:19:14.567Z