# Laravel patched every running Laravel Cloud app after PHP's critical security release

> Source: <https://runtimewire.com/article/laravel-emergency-php-vulnerability-response-otwell-ai-agents>
> Published: 2026-10-21 23:18:34+00:00

# Laravel patched every running Laravel Cloud app after PHP's critical security release

**Taylor Otwell said Laravel's team worked overnight. PHP warned that the flaws could allow unauthenticated remote code execution, while Laravel Forge users still had to update servers themselves.**

        By [RuntimeWire Staff](https://runtimewire.com/author/runtimewire-staff)
        · Published 

Primary source: [X](https://x.com/taylorotwell/status/2113026873529930061)

## Why it matters

Laravel's response shows how remediation depends on hosting and deployment model: each creates a different path from an upstream fix to patched customer systems.

Laravel patched running applications on its Cloud service after two critical PHP vulnerabilities were disclosed on October 21st. Founder [Taylor Otwell (@taylorotwell)](https://x.com/taylorotwell?ref=runtimewire) said the response took the team through the night and warned that advances in AI agents could make urgent security incidents more common.

When you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.