StableN/ASyncedN/A

SQL Injection Vulnerability Patched

Updated Jan 23, 2026285 viewsView on usehalo.com
  • security
  • vulnerability

General Information

This article contains frequently asked questions relating to the SQL injection vulnerability affecting various Halo versions.

This security update addresses an issue that could allow malicious actors to execute unauthorised database queries by supplying a carefully constructed payload.

Are hosted Halo instances affected?

Hosted customers have been automatically updated to a patch to resolve this issue, and therefore no action is required by hosted customers.

Are On-Prem Halo instances affected?

Halo On-Prem installations should apply the latest patch based on their chosen release channel.

Stable
Patched in version 2.174.94
Candidate
Patched in version 2.184.23
Beta
Patched in version 2.186.2

Next Steps

No action is required on the part of our customers.

We will continue to monitor our business infrastructure to ensure the same level of service and security that you expect.