No impact incident

Podio: PHP Vulnerability Response and mitigation

Affected: Advanced Workflow Automation, Advanced Workflow Automation Failover Queue

Current status of Podio: Operational — live Podio status

Timeline

1. Oct 21, 2026, 14:32 UTC
   monitoring
   We are aware of the vulnerability recently announced by PHP and are actively working to mitigate the associated risk. At this time, there is no indication of any breach or compromise. As part of our mitigation efforts, we have temporarily disabled all PWA multipart requests, affecting: 1. Flow imports (ZIP/XML files) 2. All webhook requests that submit data using the multipart/form-data content type These measures are precautionary and will remain in place until the risk has been fully addressed. We will continue to monitor the situation closely and will provide further updates as soon as relevant information becomes available. Thank you for your patience and understanding.
2. Oct 22, 2026, 12:47 UTC
   resolved
   The PHP patch has been successfully applied. All disabled functionalities have been restored, and the service is operating as expected.

Updates as published by Podio (original).