What the eMudhra flaw reveals about Ethereum validator security

Teku and Besu have updated their Docker images after weak certificate keys created a risk for software connecting to external services, including some Ethereum validator setups. Teku 26.10.3 and Besu 26.10.2 remove affected certificate trust from their Docker images following the eMudhra incident. Teku says a default mainnet node is unaffected, while exposure depends on HTTPS connections and the Java runtime used by the operator. The disclosed risks concern impersonated services and validator operations, with no exploitation reported in Teku's notice. The immediate question for operators is whether their software could accept a fake certificate when connecting to another service.