Skip to content
OpenAdvisories

Package · npm

paperclipai

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 10.0
    CVE-2026-41679 Exploited Public exploit Scanner template EPSS 32%

    Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

    Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authen…

    paperclipai @paperclipai/server paperclip @paperclipai/server npm
  • High 8.7
    GHSA-gqqj-85qm-8qhf

    Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email

    ### Summary A Paperclip-managed `codex_local` runtime was able to access and use a Gmail connector that I had connected in the ChatGPT/OpenAI apps UI, even though I had not explicitly connected Gmail inside Paperclip or separately inside Codex. In my environm…

    paperclipai npm