PHP2Shell
October 2026
Some critical vulnerabilities have been discovered in PHP, which is a commonly used scripting language used in web pages and tools.
The vulnerabilities are
See more information at the PHP pages
The main risk posed by these vulnerabilities is that they can allow unauthenticated remote code execution.
How this affects your Rapidminer AI deployment
- Rapidminer AI Studio is not affected by this vulnerability, as it does not contain any PHP code.
- Rapidminer AI Hub does contain some PHP code in two of its components, and could be potentially affected, although the malicious user would need access to the system to exploit it.
Siemens has immediately developed and published patches for the affected components.
We strongly encourage all our users with Rapidminer AI Hub on their environments to follow the procedure described below to protect against this vulnerability.
How to remediate the vulnerability
Update the following Rapidminer AI Hub Docker images:
- rapidminer-deployment-landing-page to tag 2026.1.2.1
- rapidminer-platform-admin-webui to tag 2026.1.2.1
For more details refer to our documentation: Install Rapidminer AI Hub