Google responds to PHP security vulnerability: Google Cloud itself is not vulnerable; customers should immediately upgrade to PHP 8.2 or higher.

October 21: Google announced that Google Cloud is rolling out updated serverless base images for all supported PHP versions, urging customers to immediately upgrade to PHP 8.2 or higher and redeploy their services using the patched versions.

Google stated that Google Cloud itself is not vulnerable, but users running PHP on Google Cloud may be at risk. Google also said that Gemini 4 ARGON contributed to discovering the vulnerability, developing exploits, detecting attacks, and validating patches.