rewindex

CompaniesLaunchDarklyIncidents

LaunchDarkly: Action Recommended: Update SDKs and Relay Proxy for eMudhra CA Issue

MaintenancemaintenanceStatus: completededitedStarted Resolved (12 d)3 updatesstspg.io (opens in new tab)

Affected components: SDKs

Timeline of updates

  1. scheduledEdited

    We currently have no indication that LaunchDarkly-hosted services or customer data are impacted by the publicly-disclosed compromised intermediate CA certificates from eMudhra (https://emudhra.we-have-a-problem.com/ (opens in new tab)). This guidance applies to all LaunchDarkly instances: Commercial, EU, and Federal.
    LaunchDarkly has already taken precautionary steps to secure our platform and has released updated versions of the Relay Proxy and SDKs used by our customers. We continue to monitor the situation and patch all non-critical services.
    We highly recommend that customers immediately take the following steps to secure the network connection between their systems and LaunchDarkly:
    - Update LaunchDarkly SDKs and Relay Proxy listed below to the latest version provided
    - Ensure your application hosts disallow the compromised CAs
    - Follow publicly-documented remediation steps for your application infrastructure to disallow compromised CAs: https://emudhra.we-have-a-problem.com/ (opens in new tab)
    LaunchDarkly SDKs
    Only the following LaunchDarkly SDKs are affected by this issue and require an update to the versions listed.
    - Server-side SDK for Python (9.18.3): https://github.com/launchdarkly/python-server-sdk/releases/tag/9.18.3 (opens in new tab)
    - Server-Side SDK for Erlang/Elixir (3.12.1): https://github.com/launchdarkly/erlang-server-sdk/releases/tag/v3.12.1 (opens in new tab)
    - OpenFeature provider for the Server-Side SDK for Python (0.8.3): https://github.com/launchdarkly/openfeature-python-server/releases/tag/0.8.3 (opens in new tab)
    - SDK OTEL integration for the Python server side SDK (1.3.0): https://github.com/launchdarkly/python-server-sdk-otel/releases/tag/1.3.0 (opens in new tab)
    - Observability and Session Replay SDK for Python (1.3.4): https://github.com/launchdarkly/observability-sdk/releases/tag/launchdarkly-observability-python-1.3.4 (opens in new tab)
    LaunchDarkly Relay Proxy
    - Relay Proxy (8.23.2): https://github.com/launchdarkly/ld-relay/releases/tag/v8.23.2 (opens in new tab)
    - Relay Proxy Helm Chart (3.11.3): https://github.com/launchdarkly/ld-relay-helm/releases/tag/3.11.3 (opens in new tab)
    We will provide further updates as the situation develops. You can always view our trust center (https://app.vanta.com/launchdarkly.com/trust/gu6fblhdgsyexg8g2xsj0 (opens in new tab)) for the latest updates, as well

  2. in progress

    Scheduled maintenance is currently in progress. We will provide updates as necessary.

  3. completed

    The scheduled maintenance has been completed.

Changes Rewindex caught on this incident

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).

Cite this

Maintenance posted by LaunchDarkly, started 2026-10-21 18:34 UTC, resolved after 12 d, 3 update(s); edited after publishing.

Title
Action Recommended: Update SDKs and Relay Proxy for eMudhra CA Issue
Vendor
LaunchDarkly
Date
URL
https://rewindex.com/company/launchdarkly/incidents/rlltvz6r85ht

LaunchDarkly profileRecent LaunchDarkly incidentsAll outages on October 21, 2026LaunchDarkly in October 2026MarkdownJSON