-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0299
============================================================

Advisory-ID:  0xCERT-2026-0299
Severity:     High
Published:    2026-10-22T02:53:00.000Z
Updated:      2026-11-02T12:44:05.938Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0299

Title: Lighthouse v8.3.1: high-priority release distrusting the compromised eMudhra certificate authority

Summary
- -------
Lighthouse v8.3.1 updates the client's trusted certificates to mitigate the compromised eMudhra certificate authority. Sigma Prime says all users on all networks should upgrade as soon as practical, especially setups using HTTPS for checkpoint sync, web3signer, or VC-to-BN connections.

Details
- -------
Summary
Sigma Prime released Lighthouse v8.3.1 as a high-priority release that updates Lighthouse's trusted certificates to mitigate the compromised eMudhra certificate authority. The release notes give no further technical detail.

Affected
- - Lighthouse (sigp/lighthouse) beacon node and validator client before v8.3.1
- - Fixed in v8.3.1

Impact
Per the release notes, the risk concerns HTTPS connections made by Lighthouse, for example checkpoint sync, web3signer, and validator-client-to-beacon-node connections. Update priority: Beacon Node High for staking users, Medium for non-staking; Validator Client High for staking users. The release notes do not report exploitation in the wild.

Recommended actions
- - Upgrade Lighthouse to v8.3.1 or later (v8.3.2 is also required for Hoodi)
- - Prioritise nodes that use HTTPS for checkpoint sync, web3signer, or VC-to-BN connections
- - Users coming from v8.2.x should read the v8.3.0 release notes first

Source & attribution
This 0xCERT advisory relays the Lighthouse v8.3.1 release notes by Sigma Prime: https://github.com/sigp/lighthouse/releases/tag/v8.3.1. Details may change; refer to the original source for the authoritative record.

References
- ----------
- - https://github.com/sigp/lighthouse/releases/tag/v8.3.1

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrtES4JEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmfeHE8FFCwzr7DOob91nUQmTbkgVF5FDlb0FHm0
A8jFtRYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAADt7gD/fxYw3STcXEUJkDUc
6Werp8TVjIxupgKF93KvS/yfJWcA/23iegJTix+nomcSkSrsKl6t4jctYbJn
ODnZL9aEXigC
=xuyN
-----END PGP SIGNATURE-----