Obol is asking mainnet operators to immediately update Charon to version 1.11.2, released on October 21, 2026, following the compromise of intermediate certificate authority certificates linked to the eMudhra incident. The update upgrades the version of Go used by Charon, corrects certificate validation and removes trust in specific roots within the Docker image. The vulnerability, reported around October 17, 2026 and tracked as CVE-2026-111943, has already prompted Mozilla, Google, Apple and Microsoft to block the affected roots. Charon coordinates multiple operators for Ethereum staking through Obol, whose latest mainnet snapshot showed a total balance of 422,862 ETH. No funds were reported as affected.
Source: Read the original article


