{
  "id": 19210815,
  "title": "macOS 27.2.1 Fixes eMudhra Certificate Flaw in Command-Line Tools",
  "url": "https://urgent.news/2026/11/09/macos-27-2-1-fixes-emudhra-certificate-flaw-in-command-line-tools",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-09T20:26:53.000Z",
  "source": {
    "name": "MacRumors",
    "slug": "macrumors",
    "url": "https://www.macrumors.com/2026/11/09/macos-27-2-1-emudhra-fix/"
  },
  "original_language": "en",
  "account": "Apple has released macOS 27.2.1 to address a security vulnerability involving eMudhra certificates in command-line tools. The eMudhra certificates, issued by a certificate authority, had below 256-bit private key values, making them easily recoverable by attackers. These certificates could be used to create fraudulent certificates that appeared valid for any website. Apple initially blocked these compromised certificates in Safari, Mail, and apps using Apple frameworks in October, but command-line tools like curl and git were still able to accept them. With the update, command-line tools will no longer accept the certificates, preventing potential security risks. Users who cannot update their Macs have the option to manually remove the affected root certificates from the /etc/ssl/cert.pem file. Apple also provided this workaround in their previous instructions for users who wanted to protect themselves from the compromised certificates. The vulnerability was discovered through an investigation by Mozilla, which found that the private key values used in the certificates were below the recommended 256-bit strength. Apple addressed the issue in the macOS Golden Gate 27.3 beta, but including the fix in macOS 27.2.1 means users won't have to wait until December for protection.",
  "summary": "The macOS Golden Gate 27.2.1 update Apple released today addresses the eMudhra certificate vulnerability, and Apple recommends users update to the latest software. For Macs that run macOS 26 or macOS 15, Apple has released macOS 26.7.3 and macOS 15.8.3. Apple previously blocked the compromised certificates in Safari, Mail, and apps that use Apple frameworks in October to protect most users, but…",
  "key_points": [
    "Apple releases macOS 27.2.1 to fix security vulnerability",
    "eMudhra certificates with below 256-bit private keys exploited",
    "Command-line tools will reject compromised certificates in update"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}