The first developer beta of macOS 27.3 includes a security patch specifically targeting the removal of compromised eMudhra intermediate CA certificates from the /etc/ssl/cert.pem file.

This update prevents command-line tools from trusting these weak cryptographic keys. While the full macOS 27.3 release is slated for December, Apple is expected to backport this fix via a macOS 27.2.1 release.

For developers or system administrators who need to remediate this immediately, Apple has provided documentation on manually modifying the cert.pem file. Note that Safari, Mail, and other applications utilizing Apple's native networking frameworks have been blocking these certificates since October 19, 2026.

Source: https://www.macrumors.com/2026/11/04/macos-27-3-important-security-fix/