Rocket.Chat was not impacted by the PHP2Shell vulnerability, as its core technology stack is primarily built on TypeScript and Go.
The only potentially exposed service, an instance of SimpleSAMLphp, was deployed in an isolated testing environment and was promptly taken offline by our Security and SRE teams even before public disclosure of the vulnerability.