Security Advisory – PHP2SHELL Vulnerabilities

Incident Report for Litmos

Monitoring

Litmos is aware of the recently reported PHP2SHELL vulnerabilities and has reviewed their potential impact on our platform.

The Litmos application does not use PHP and is therefore not directly susceptible to these specific vulnerabilities.

As part of our ongoing commitment to security, we are also proactively reviewing our third-party vendors to assess any potential indirect exposure.

Protecting our customers and their data remains a top priority. We will continue to monitor the situation and provide updates if any additional information becomes available that may impact our customers.

No customer action is required at this time.

Posted Oct 22, 2026 - 06:48 PDT

This incident affects: Litmos US (US1, US2, US3, US4, US5, US6, US7, API, LTO), Litmos EU (EU, API), and Litmos AU (AU, API).