{"slug": "laravel-patched-every-running-laravel-cloud-app-after-php-s-critical-security", "title": "Laravel patched every running Laravel Cloud app after PHP's critical security release", "summary": "Laravel patched every running application on Laravel Cloud after two critical PHP vulnerabilities disclosed on October 21st that PHP warned could allow unauthenticated remote code execution, founder Taylor Otwell said, adding that the team worked through the night. Laravel Forge users still had to update their own servers, and Otwell warned that advances in AI agents could make urgent security incidents more common.", "body_md": "# Laravel patched every running Laravel Cloud app after PHP's critical security release\n\n**Taylor Otwell said Laravel's team worked overnight. PHP warned that the flaws could allow unauthenticated remote code execution, while Laravel Forge users still had to update servers themselves.**\n\n        By [RuntimeWire Staff](https://runtimewire.com/author/runtimewire-staff)\n        · Published \n\nPrimary source: [X](https://x.com/taylorotwell/status/2113026873529930061)\n\n## Why it matters\n\nLaravel's response shows how remediation depends on hosting and deployment model: each creates a different path from an upstream fix to patched customer systems.\n\nLaravel patched running applications on its Cloud service after two critical PHP vulnerabilities were disclosed on October 21st. Founder [Taylor Otwell (@taylorotwell)](https://x.com/taylorotwell?ref=runtimewire) said the response took the team through the night and warned that advances in AI agents could make urgent security incidents more common.\n\nWhen you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.", "url": "https://wpnews.pro/news/laravel-patched-every-running-laravel-cloud-app-after-php-s-critical-security", "canonical_source": "https://runtimewire.com/article/laravel-emergency-php-vulnerability-response-otwell-ai-agents", "published_at": "2026-10-21 23:18:34+00:00", "updated_at": "2026-10-22 02:41:54.848339+00:00", "lang": "en", "topics": ["ai-agents"], "entities": ["Laravel", "Laravel Cloud", "Laravel Forge", "PHP", "Taylor Otwell"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/laravel-patched-every-running-laravel-cloud-app-after-php-s-critical-security", "markdown": "https://wpnews.pro/news/laravel-patched-every-running-laravel-cloud-app-after-php-s-critical-security.md", "text": "https://wpnews.pro/news/laravel-patched-every-running-laravel-cloud-app-after-php-s-critical-security.txt", "jsonld": "https://wpnews.pro/news/laravel-patched-every-running-laravel-cloud-app-after-php-s-critical-security.jsonld"}}