Podio incident

PHP Vulnerability Response and mitigation

Resolved after 22 hours 15 minutes, affecting Advanced Workflow Automation and Advanced Workflow Automation Failover Queue, on October 21, 2026.

resolved Oct 22, 2026, 12:47 PM UTC

The PHP patch has been successfully applied. All disabled functionalities have been restored, and the service is operating as expected.

Started
Oct 21, 2026, 02:32 PM UTC
Resolved
Oct 22, 2026, 12:47 PM UTC
Duration
22h 15m
Detected by Pingoru
Oct 21, 2026, 02:32 PM UTC

Affected components

Advanced Workflow AutomationAdvanced Workflow Automation Failover Queue

Update timeline

  1. monitoring Oct 21, 2026, 02:32 PM UTC

    We are aware of the vulnerability recently announced by PHP and are actively working to mitigate the associated risk. At this time, there is no indication of any breach or compromise. As part of our mitigation efforts, we have temporarily disabled all PWA multipart requests, affecting: 1. Flow imports (ZIP/XML files) 2. All webhook requests that submit data using the multipart/form-data content type These measures are precautionary and will remain in place until the risk has been fully addressed. We will continue to monitor the situation closely and will provide further updates as soon as relevant information becomes available. Thank you for your patience and understanding.

  2. resolved Oct 22, 2026, 12:47 PM UTC

    The PHP patch has been successfully applied. All disabled functionalities have been restored, and the service is operating as expected.

Your product runs on more than Podio

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →