severity 1151374 grave thanks On Tue, 20 Oct 2026 09:00:28 +0000 Mateus Levi da Silva Martins <[email protected]> wrote:
lastpass-cli 1.6.2 was released upstream on Oct 19, 2026 (release notes). This release removes certificate pinning and switches TLS validation to the system trust store. According to the release notes, older versions will no longer be able to connect once LastPass migrates to the GlobalSign R46/E46 certificate chain, so upgrading to 1.6.2 is required rather than optional.
The certificates for lastpass.com have recently been changed, so lastpass-cli is currently not usable at all. Raising severity accordingly. -- Martina Ferrari
