According to CoinMeta, Ethereum clients TeKu and Besu have updated their Docker images to fix a certificate-related vulnerability. The vulnerability stemmed from the use of weak certificate keys when connecting to external services, which could potentially allow software to accept forged certificates. The update removed trust in the affected Emudhra certificates to prevent attackers from impersonating external services and redirecting block fees under certain configurations. Versions TeKu 26.10.3 and Besu 26.10.2 no longer trusted the affected certificate roots. Although default mainnet nodes were not affected, operators using external HTTPS services need to check their connections. This incident highlights the importance of verifying the security of the validator infrastructure, even though Ethereum's consensus rules remain unchanged.