Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two critical vulnerabilities in Paperclip, an open-source control plane for AI agents, could allow attackers to execute arbitrary commands on a server…
Tag: Paperclip
CVE-2026-41679: Paperclip Critical Flaw Allows Remote Code Execution
A critical vulnerability in Paperclip's authenticated mode with default registration allows unauthenticated attackers to self-approve credentials and import a malicious agent, leading…
GHSA-x8hx-rhr2-9rf7: DNS Rebinding in Paperclip Local Mode
A high-severity flaw in Paperclip's local_trusted mode allows DNS rebinding attacks to execute commands on the developer's machine with CVSS 9.6. Fixed…
GHSA-xfqj-r5qw-8g4j: Paperclip API Access Control Flaws
Multiple API routes in Paperclip lacked proper access checks, exposing sensitive data and control-plane details. Fixed in v2026.416.0 with added authentication and…
Paperclip: Open-Source Control Plane for AI Agents
Paperclip is an open-source control plane for managing teams of AI agents. It suffered critical vulnerabilities allowing remote code execution via malicious…
Oasis Security Discovers Paperclip Vulnerabilities
Oasis Security analyzed and reported the Paperclip vulnerabilities, providing a 17-page technical report and recommending upgrades to v2026.416.0.