PHP Vulnerability Responses by Company

LastPass US LP

Companies / web services
Aliases / services
ラストパス / LastPass / LastPass US LP
Official website
https://www.lastpass.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

sales/support contact information in Salesforce

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

In June 2026, stolen Klue OAuth credentials enabled access to Salesforce contact and support-case data. LastPass says password vaults and product infrastructure were not compromised.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Watch for phishing using sales/support information. LastPass says it never asks for your master password.

Official service URL

Source URLs

  1. 2026-06-22 official security noticehttps://blog.lastpass.com/posts/klue-supply-chain-incident-and-lastpass-responseService and operation documentation
Related official sources
  1. Operator and official informationOfficial information directoryIdentifies LastPass US LP and the relevant service scope.
  2. 2026-06-22 official security noticeOfficial notice; link to this PHP incident unconfirmedIn June 2026, stolen Klue OAuth credentials enabled access to Salesforce contact and support-case data.

Comments