Skip to content
Threat Feed
Subscribe

Vendor

Paperclip

3 briefs RSS
critical advisory

Paperclip Unauthenticated Remote Code Execution via Import Authorization Bypass

An unauthenticated attacker can achieve remote code execution on Paperclip instances by exploiting multiple vulnerabilities, including open signup, self-approval of CLI authentication challenges, and missing authorization checks in the company import endpoint, leading to arbitrary command execution as the server's OS user.

Paperclip +2 rce authentication-bypass code-execution
2r 4t 1i
critical advisory

Paperclip Privilege Escalation via Agent API Key

A privilege escalation vulnerability in Paperclip allows an attacker with an Agent API key to execute arbitrary OS commands on the Paperclip server host by injecting commands into the `adapterConfig.workspaceStrategy.provisionCommand` field via the `/agents/:id` API endpoint, leading to remote code execution.

Paperclip privilege-escalation remote-code-execution
2r 2t
critical advisory

Paperclip AI OS Command Injection via Execution Workspace cleanupCommand

A critical OS command injection vulnerability exists in Paperclip AI v2026.403.0 within the execution workspace lifecycle. By injecting arbitrary shell commands into the `cleanupCommand` field via the `PATCH /api/execution-workspaces/:id` endpoint, an attacker can execute these commands on the server when the workspace is archived.

Paperclip AI command-injection rce paperclip vulnerability
2r 1t