Paperclipai vulnerabilities

2 known vulnerabilities in Paperclipai from Paperclip. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  paperclip: Improper Authentication

  CVE-2026-41679Apr 23, 2026PaperclipaiEPSS 31.7%

  Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authent

• 8.8 High severity

  @paperclipai/server: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-41208Apr 23, 2026Paperclipai

  Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Versions of @paperclipai/server prior to 2026.416.0 contain a privilege escalation vulnerability that allows an attacker with an Agent API key to execute arbitr