If you self-host a WordPress blog, or any other blog, behind Cloudflare Tunnel, update its connector now. Cloudflare’s email reached me on October 26 under the subject “[Action Required] Upgrade your Cloudflare Tunnel to version 2026.10.2 or later”.

The email follows Cloudflare’s advisory from October 20. It says the private keys of eight intermediate certificates from eMudhra, a certificate authority, were compromised, which could let an attacker forge a certificate for any domain, pose as the server, and intercept or modify its traffic. Cloudflare has found no active exploitation on its services, and its network-side mitigations were in place the same day. The connector, cloudflared, runs on the site owner’s machine; in a container, updating it means pulling and redeploying the fixed image.

If your blog sits on a hosting service, this email isn’t for you: you have no connector to update, and any certificate cleanup on the server is the host’s job. If you run the server yourself, the connector is yours.

The connector on my home server was still on 2026.7.3, pinned and kept out of automatic updates, so it would have stayed there until someone moved it. I told the AI agent about the email; it checked the version, matched the email to the advisory, and came back with a plan before touching anything. Once I said go, it moved the connector to 2026.10.4. Recreating it took about a second, and the site’s checks passed. Aside from signing in to Cloudflare with my passkey and handing the browser over so the agent could keep working, I didn’t have to do anything myself.

Without the tunnel, my setup would expose my home IP. A small business running its own server would be in the same spot, its IP open to the public. The connector only makes outbound connections to Cloudflare, and with no port open, the way in runs through Cloudflare. If I had to guess, an exposed IP isn’t ideal for other protections, such as against DDoS.

So check your connector’s version, and if it’s below 2026.10.2, update it. For a small site, the tunnel is a good service to have, and keeping it current is straightforward. With an AI, it’s only one session away for maintenance.