This issue was resolved with the release of the updated clients on October 23rd.
Posted Nov 03, 2026 - 21:12 UTC
Update
We are continuing to monitor for any further issues.
Posted Oct 26, 2026 - 08:49 UTC
Update
What's new Following our earlier advisory (https://status.lucidlink.com/incidents/pyrcv6319vn6) about the eMudhra certificate issue, we have released updated LucidLink desktop clients that remove the affected third-party certificates from the client's list of trusted certificate authorities. We recommend that you install the update as soon as you are able.
Available downloads Patches are now available on the [LucidLink Downloads](https://www.lucidlink.com/download) page for LucidLink 2.x and 3.x clients as well as mobile app stores.
What to do next Please update all LucidLink desktop and mobile clients to the latest versions, and if you have any issues, please use the links below to get in touch.
Thank you for being a LucidLink customer and for your prompt attention to this update.
Sincerely, LucidLink Engineering
Posted Oct 24, 2026 - 16:19 UTC
Monitoring
What happened This week, security researchers disclosed that eight certificates issued by eMudhra, a third-party certificate authority (CA), were created with weak cryptographic keys. eMudhra has revoked them, and Google, Mozilla, and Apple have removed trust in them. Like other software that bundles its own list of trusted CAs, the LucidLink desktop client needs an update. LucidLink’s servers and infrastructure are not affected.
How it relates to LucidLink The LucidLink desktop client includes its own list of trusted certificate authorities. In theory, an attacker positioned on your network connection who had forged one of these certificates could attempt to impersonate a server to an out-of-date client. We have seen no indication that it has been attempted against LucidLink or our customers.
What are we doing LucidLink is actively working to remove the affected third-party certificates from both LucidLink 2.x / Classic and LucidLink 3.x. We will release updated desktop clients as soon as our test process is complete, likely this weekend.
What’s next We appreciate your partnership and we are committed to maintaining your trust. Please look out for a follow up email as our team works to deliver this patch asap.
As always, you have access to the LucidLink status page and our support team if you need additional assistance.
We will be back in touch shortly when fixes are available.
Sincerely, Gregory Tomczyk VP of Security
Posted Oct 23, 2026 - 17:17 UTC
This incident affected: LucidLink (North America), LucidLink (Latin America), LucidLink (Asia-Pacific), and LucidLink (Europe).