CompaniesLaunchDarklyIncidents
LaunchDarkly: Action Recommended: Update SDKs and Relay Proxy for eMudhra CA Issue
Affected components: SDKs
Timeline of updates
- scheduledEdited
We currently have no indication that LaunchDarkly-hosted services or customer data are impacted by the publicly-disclosed compromised intermediate CA certificates from eMudhra (https://emudhra.we-have-a-problem.com/ (opens in new tab)). This guidance applies to all LaunchDarkly instances: Commercial, EU, and Federal.
LaunchDarkly has already taken precautionary steps to secure our platform and has released updated versions of the Relay Proxy and SDKs used by our customers. We continue to monitor the situation and patch all non-critical services.
We highly recommend that customers immediately take the following steps to secure the network connection between their systems and LaunchDarkly:
- Update LaunchDarkly SDKs and Relay Proxy listed below to the latest version provided
- Ensure your application hosts disallow the compromised CAs
- Follow publicly-documented remediation steps for your application infrastructure to disallow compromised CAs: https://emudhra.we-have-a-problem.com/ (opens in new tab)
LaunchDarkly SDKs
Only the following LaunchDarkly SDKs are affected by this issue and require an update to the versions listed.
- Server-side SDK for Python (9.18.3): https://github.com/launchdarkly/python-server-sdk/releases/tag/9.18.3 (opens in new tab)
- Server-Side SDK for Erlang/Elixir (3.12.1): https://github.com/launchdarkly/erlang-server-sdk/releases/tag/v3.12.1 (opens in new tab)
- OpenFeature provider for the Server-Side SDK for Python (0.8.3): https://github.com/launchdarkly/openfeature-python-server/releases/tag/0.8.3 (opens in new tab)
- SDK OTEL integration for the Python server side SDK (1.3.0): https://github.com/launchdarkly/python-server-sdk-otel/releases/tag/1.3.0 (opens in new tab)
- Observability and Session Replay SDK for Python (1.3.4): https://github.com/launchdarkly/observability-sdk/releases/tag/launchdarkly-observability-python-1.3.4 (opens in new tab)
LaunchDarkly Relay Proxy
- Relay Proxy (8.23.2): https://github.com/launchdarkly/ld-relay/releases/tag/v8.23.2 (opens in new tab)
- Relay Proxy Helm Chart (3.11.3): https://github.com/launchdarkly/ld-relay-helm/releases/tag/3.11.3 (opens in new tab)
We will provide further updates as the situation develops. You can always view our trust center (https://app.vanta.com/launchdarkly.com/trust/gu6fblhdgsyexg8g2xsj0 (opens in new tab)) for the latest updates, as well - in progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
- completed
The scheduled maintenance has been completed.
Changes Rewindex caught on this incident
- Incident silently edited: Action Recommended: Update SDKs and Relay Proxy for eMudhra CA Issue
- Incident updated: Action Recommended: Update SDKs and Relay Proxy for eMudhra CA Issue
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
First version captured
In the 2026-10-21 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
ed295ffc10fddb13…Version 2 captured
In the 2026-10-26 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
ec0df63179b47a07…Version 3 captured
In the 2026-11-03 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
3559314533a6ac81…
Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).
Cite this
Maintenance posted by LaunchDarkly, started 2026-10-21 18:34 UTC, resolved after 12 d, 3 update(s); edited after publishing.
- Title
- Action Recommended: Update SDKs and Relay Proxy for eMudhra CA Issue
- Vendor
- LaunchDarkly
- Date
- URL
- https://rewindex.com/company/launchdarkly/incidents/rlltvz6r85ht
LaunchDarkly profileRecent LaunchDarkly incidentsAll outages on October 21, 2026LaunchDarkly in October 2026MarkdownJSON