Learnosity status

Status verification pending

The latest official observation is not fresh enough to confirm current service health.

Official incident resolved

Issue affecting LTS Remapping of Sunset version v2024.1.LTS — ### Affected Systems and Regions On 8 October 2026, Learnosity experienced intermittent API errors only affecting requests that specified the retired API version `v2024.1.LTS` in the US Virginia, US Oregon, Australia, and Ireland regions. This version reached End of Life in March of 2026 After sunset, affected requests should have been automatically redirected to the latest long-term-support \(LTS\) release. Instead, some returned server errors. Customer impact began at approximately 00:14 UTC and continued intermittently until 15:08 UTC, varying by region. Only a portion of production servers were affected, so not all requests specifying this version failed. ### Investigation The incident was caused by an incomplete configuration update during the October 8 platform release, which retired `v2024.1.LTS`. Although the updated version mapping was correct in staging, a required release step to update production configuration servers was not completed. Consequently, some production servers retained an outdated mapping that directed requests to API versions that had been removed. Our existing release validation verified that deployed API versions were available but did not verify that retired versions redirected correctly in each production region. As a result, the configuration inconsistency was not detected during deployment. ### Resolution Learnosity engineers identified the outdated version mapping and restored service by regenerating configuration on affected production servers, region by region. By 15:08 UTC, verification confirmed that the correct version mapping was in place across all checked regions and requests were being handled correctly. The incident was formally resolved at 15:48 UTC. ### Prevention Learnosity is implementing improvements to its release and validation procedures to prevent similar configuration inconsistencies. These include automated verification that all production configuration servers are running the correct release version, integrating configuration updates directly into the deployment process so they cannot be inadvertently skipped, and expanding release validation to confirm that retired API versions redirect correctly in every region. We are also improving alerting to detect this specific class of error earlier and developing tooling to identify and refresh servers retaining outdated configurations. These measures are intended to ensure consistent deployments across regions, detect configuration discrepancies before they affect customers, and accelerate recovery should similar issues occur.

Official maintenance active

Learnosity Demos Site – Temporary Maintenance — ## Affected Systems and Regions On 21 October 2026, Learnosity temporarily took the Learnosity Demos site offline as a precautionary measure following the disclosure of two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, commonly known as PHP2Shell. The maintenance affected the Learnosity Demos site only. Learnosity's production APIs and services remained operational, with no customer-facing service disruption identified. ## Investigation The vulnerabilities affected PHP, a widely used server-side programming language used by Learnosity services, as well as an estimated 70% of internet applications. Both vulnerabilities were rated critical \(CVSS 9.2\) and could potentially allow unauthorized remote code execution. Learnosity's Platform and Security teams reviewed potential exposure across the platform and implemented additional monitoring and protective measures while awaiting official security updates. Our investigation and subsequent monitoring found no evidence of exploitation or compromise associated with these vulnerabilities. ## Resolution The PHP Project released security updates at 14:00 UTC on 21 October 2026. Learnosity immediately began deploying these updates, rebuilding all PHP services using the official PHP 8.3.36 release. Following completion and verification of the updates, the Learnosity Demos site was restored to service on 22 October 2026. All Learnosity Build servers have been patched, and no action is required for customers using Learnosity's hosted APIs and services. ## Prevention Learnosity continues to monitor its services for potential exploitation and maintains security monitoring and protective measures to identify and respond to emerging threats. Customers operating their own PHP environments, including those using the Learnosity PHP SDK in server-side integrations, should ensure their PHP installations are updated to a patched version following their hosting provider's or operating system's guidance.