File Upload support has been deactivated due to a security vulnerability in PHP.

Update timeline

1. investigating Oct 21, 2026, 01:04 PM UTC

   Per our CEO, Joe Faherty [email protected]: I wanted to let you know personally about some maintenance we did on Ryver last night and into this morning. A security weakness/vulnerability was recently found in PHP, a widely used programming tool used by millions of other websites, including some parts of Ryver. It's an internet-wide problem, not something specific to Ryver. As soon as we learned about it, we moved quickly to protect your account and your data. We have found no sign that anyone used this weakness to get at your data. You don't need to do anything. What we did: Last night and into this morning, we updated the affected parts of Ryver to a fixed version and restarted our servers. Out of an abundance of caution, we have turned off the ability to upload files. What it means for you: The update is currently being deployed and with the exception of file uploads, Ryver is working normally. As soon as the deployment is finished, we will be turning on the ability to upload files. I'm sorry for the disruption to your team's day. We chose to fix this right away rather than wait for a quieter time because keeping your conversations safe comes first. We know how much your team relies on Ryver, so we don't take that decision lightly. If anyone on your team noticed anything unusual, or if you have any questions, please reply to me directly.

2. investigating Oct 21, 2026, 01:09 PM UTC

   Affects the APIs only

3. investigating Oct 22, 2026, 08:38 AM UTC

   Ryver has been updated. "File Upload" service has been resolved.

4. resolved Oct 22, 2026, 08:39 AM UTC

   This incident has been resolved.