CVE-2026-115570 electron CVE debrief

Who should care

Developers using Electron should assess exposure and update to a patched version. This is crucial for those who make TLS connections over a network an attacker can intercept. The update prevents impersonation of TLS servers and ensures the security of Electron applications. Developers should verify that their applications do not use the compromised certificates and update to a patched version of Electron. Security teams should also review the advisory and

Why it matters

CVE-2026-115570 is a mitigation for compromised eMudhra intermediate certificates used in Electron applications. Developers should update to a patched version to prevent impersonation of TLS servers.

• Verify TLS connections are made over a secure network
• Update to a patched version of Electron to prevent impersonation of TLS servers
• Assess exposure of Electron applications to compromised eMudhra intermediate certificates

Technical summary

The Electron update adds a block to Chromium networking and Node.js tls, https, and fetch. This mitigation prevents apps from trusting compromised eMudhra intermediate certificates. Apps are only affected if they make TLS connections over a network an attacker can intercept. The patched versions are 45.0.0-beta.6, 44.9.1, 43.8.1, and 42.11.16. Developers should update to a patched version to prevent impersonation of TLS servers. The mitigation is a response to the compromise of eMudhra intermediate certificates, which were used to issue certificates.

Defensive priority

Update to a patched version of Electron

Recommended defensive actions

• Update to Electron version 45.0.0-beta.6 or later
• Update to Electron version 44.9.1 or later
• Update to Electron version 43.8.1 or later
• Update to Electron version 42.11.16 or later
• Verify TLS connections are made over a secure network
• Assess exposure of Electron applications to compromised eMudhra intermediate certificates
• Review compensating controls for exposed systems while remediation is scheduled and verified

Evidence notes

The Electron advisory provides details on the compromised eMudhra intermediate certificates and the mitigation added to Electron. The advisory also mentions that other software, such as Go (CVE-2026-111943) and Firefox (CVE-2026-113470), have shipped similar mitigations. Electron's mitigation adds a block to Chromium networking and Node.js tls, https, and fetch. This ensures that apps using Electron do not trust the compromised certificates. The advisory emphasizes that apps are only affected if they make TLS connections over a an a

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.