A critical security vulnerability affecting the PHP programming language (CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell) was recently disclosed. Taiwan’s Administration for Cyber Security, Ministry of Digital Affairs, has urged government agencies and businesses to patch affected systems promptly.
Following a comprehensive review, MaiAgent confirms that the MaiAgent platform, including both its cloud service and on-premises deployments, does not use PHP and is not affected by this vulnerability. Customers do not need to apply any patches or schedule downtime, and all MaiAgent services continue to operate normally.
We will continue to monitor the situation and will notify customers proactively should anything change.
References
Administration for Cyber Security, Ministry of Digital Affairs — Announcement (in Chinese)
