Understand this story
On October 23, 2026, Replit disclosed that it has taken protection and remediation measures for the eMudhra, Node.js, PHP, LiteLLM, and Linux kernel vulnerabilities disclosed this week. According to its statement, Replit has blocked exploitation attempts at the firewall layer and automatically removed the affected eMudhra CA for 95% of published apps. For Node.js and PHP apps, republishing is required to use the patched runtime; Python apps also need to be republished to incorporate toolchain updates. Malicious package installation attempts against LiteLLM were all blocked by Socket Firewall, while the Linux kernel vulnerability is naturally blocked by its microVM architecture. The current status is that the above measures have been disclosed, and the requirement to republish the relevant apps still awaits user action.
AI-generated from public reports
Latest development · Report
Frequent internet security vulnerabilities: How Replit protects your businessDevelopments
1 confirmed developments
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 23
Replit BlogFirst-party
Frequent internet security vulnerabilities: How Replit protects your business
For the eMudhra, Node.js, PHP, LiteLLM and Linux kernel vulnerabilities disclosed this week, Replit has blocked exploitation attempts at the firewall layer and automatically removed the affected eMudhra CA for 95% of published apps. Node.js and PHP apps need to be republished to use the patched runtime, and Python apps also need to be republished to incorporate toolchain updates; all malicious package installation attempts against LiteLLM were blocked by Socket Firewall, while the Linux kernel vulnerability is inherently blocked by its microVM architecture.