Skip to content
OpenAdvisories

Vendor

paperclipai

4 known vulnerabilities.

Products

@paperclipai/server 3 paperclip 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-119713

    Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands

    Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspac…

    paperclipai @paperclipai/server @paperclipai/server npm
  • High 8.8
    CVE-2026-41208

    Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution

    Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Versions of @paperclipai/server prior to 2026.416.0 contain a privilege escalation vulnerability that allows an attacker with an Agent API key to execute arbit…

    paperclipai @paperclipai/server @paperclipai/server npm