CVE-2026-111943: Distrust compromised intermediate certificates in crypto/x509
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
Affected Software
Event History
Frequently Asked Questions
Which deployments may need additional attention beyond normal system trust-store updates?
The concern is limited to narrower cases where the system trust store may not be updated without further action. On most platforms, Go uses the system root certificates provided to it.
What operation is protected by the added denylist?
The denylist is applied when crypto/x509 Verify is called. Verification returns an error if the chain includes any known intermediate certificate that is no longer considered trustworthy.