This is a hot fix for most Geometry Dash Private Servers until the server hosters can update to the latest php version.
The php2shell is a vulnerability in all php that allows hackers to remotely execute code (RCE). Wikipedia says “PHP2Shell is a pair of high-impact computer vulnerabilities (CVE-2026-109618 and CVE-2026-109619) concerning memory safety flaws in PHP versions 5.4–8.5 that allow remote code execution (RCE).”
If you are the owner or developer of a gdps and you haven’t updated PHP to 8.5.12, 8.4.27, 8.3.36, or 8.2.35 you are at risk, If you are the user of a gdps the you should try to contact the owner or developer and link this repo.
currently I’m still working on the fix, if your the owner of a large gdps just be carful.