diff --git a/core/modules/system/src/Controller/SystemInfoController.php b/core/modules/system/src/Controller/SystemInfoController.php
index 16f8bf946bf8..48fe55a01391 100644
--- a/core/modules/system/src/Controller/SystemInfoController.php
+++ b/core/modules/system/src/Controller/SystemInfoController.php
@@ -64,7 +64,7 @@ public function php() {
     if (function_exists('phpinfo')) {
       ob_start();
       $phpinfo_flags = Settings::get('sa_core_2023_004_phpinfo_flags', ~ (INFO_VARIABLES | INFO_ENVIRONMENT));
-      phpinfo($phpinfo_flags);
+      // phpinfo call removed for security reasons
       $output = ob_get_clean();
     }
     else {