PHP Vulnerability Responses by Company

dbt Labs, LLC

Global cloud / infrastructure
Aliases / services
Fivetran + dbt Labs / Fivetran / dbt Labs / dbt Cloud / dbt platform / Fishtown Analytics / getdbt.com / dbt Labs, LLC
Official website
https://www.getdbt.com/
Sources identifying the operating company

dbt terms identify dbt Labs, LLC. Separate provisions cover Fivetran products purchased under dbt orders; this does not establish one contracting entity for every region or agreement.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

dbt production and customer-facing services

Response status
No PHP; no impact reported
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Data ingestion and transformation infrastructure.

The 21 October assessment found no PHP in dbt production or customer-facing services. The 23 October update reports no evidence of impact across Fivetran + dbt or customers.

Scope: The no-PHP statement specifically covers dbt environments, not every Fivetran product architecture.

What users should do

Monitor the Trust Center; assess your own PHP integrations separately.

Official service URL

Source URLs

  1. PHP2Shell investigation updateshttps://trust.getdbt.com/Response evidence
  2. https://www.getdbt.com/terms-of-servicehttps://www.getdbt.com/terms-of-serviceService and operation documentation
  3. https://www.getdbt.com/software-and-service-specific-requirements-for-fivetran-productshttps://www.getdbt.com/software-and-service-specific-requirements-for-fivetran-productsService and operation documentation
  4. Company and provider informationhttps://www.getdbt.com/blog/fivetran-and-dbt-are-one-company-now-here-s-what-that-meansService and operation documentation
Related official sources
  1. PHP2Shell investigation updatesOfficial notice
  2. Company and provider informationOfficial information directory

Comments