CyberSecBulletin

Paperclip vulnerabilities

We track 2 vulnerabilities in Paperclip products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 23, 2026.

2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score

Latest Paperclip vulnerabilities

  • 10.0 Critical severity

    paperclip: Improper Authentication

    CVE-2026-41679PaperclipaiEPSS 31.7%

    Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authent

  • 8.8 High severity

    @paperclipai/server: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-41208Paperclipai

    Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Versions of @paperclipai/server prior to 2026.416.0 contain a privilege escalation vulnerability that allows an attacker with an Agent API key to execute arbitr