# HostBill Security Advisory

- URL: https://blog.hostbillapp.com/2026/06/09/hostbill-security-advisory-2026-06-09/
- Published: 2026-06-09
- Author: Kris Pajak
- Categories: Security

> A security update for HostBill has been released for HostBill versions: 2026-05-18 - 2026-06-08 – please update your HostBill to the most recent version.

A security update for HostBill has been released for  HostBill versions: **2026-05-18 – 2026-06-08**  – please update your HostBill to the most recent version.

A security issue has been reported to us by one of the clients that affects all HostBill versions from** 2026-05-18** until (and including) **2026-06-08 **release. The problem concerns Insecure Direct Object Reference  and the severity Low to High depends on HostBill configuration.

**Resolution: **

To mitigate this issue please update your HostBill to the most recent release, **version 2026-06-09**, either [manually](https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/491585/Upgrading+to+new+version) or using the [Auto-Update plugin](https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/491588/Auto-Upgrade+plugin).
We do not have any basis to think the issue is known in public.