Apple is addressing a certificate security vulnerability in macOS 27.3 that could affect developers and other Mac users who rely on command-line tools.
The fix targets eight compromised intermediate certificates issued by Indian certificate authority eMudhra, removing them from a system-level certificate store used to establish secure connections.
Most Mac users don’t need to wait for the update. Apple has already blocked the affected certificates for Safari, Mail, and apps using its native networking frameworks.
What Happened With eMudhra’s Certificates?
A security researcher discovered that private cryptographic keys associated with eight eMudhra intermediate certificates were weak enough to raise security concerns.
These certificates help establish trust between websites and the browsers or apps connecting to them.
If attackers obtained or reproduced the weak keys, they could potentially impersonate legitimate websites and intercept sensitive information.
However, there is currently no evidence that attackers exploited the vulnerable certificates.
Apple responded by blocking the affected certificates across its platforms on October 19, protecting users of apps that rely on Apple’s built-in certificate verification.
Why Some Mac Users Still Need a Fix
The remaining issue involves the /etc/ssl/cert.pem file, a certificate store used by certain command-line utilities.
Unlike Safari and other apps using Apple’s native networking frameworks, some Terminal-based tools rely on this separate certificate bundle to verify secure connections.
The macOS 27.3 beta removes the affected certificates from that file, closing the remaining gap for those tools.
Do You Need to Do Anything?
Luckily, you don’t need to do anything. Apple’s automatic certificate blocks have been in place since October 19.
Developers and advanced users who rely on command-line networking tools have a few options:
- Wait for the public release of macOS 27.3, expected in December.
- Install an earlier security update if Apple releases macOS 27.2.1 with the same fix.
- Follow Apple’s published instructions to manually remove the affected certificates.
Apple hasn’t confirmed whether macOS 27.2.1 will arrive before the larger update.
For anyone using Safari, Mail, and standard Mac apps, the existing protections mean there’s no reason to install beta software solely for this security fix.
