@paperclipai/server vulnerabilities (npm)
8 vulnerabilities.
-
@paperclipai/servernpm Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise 9.9 Critical -
@paperclipai/servernpm Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server 4.3 Medium -
@paperclipai/servernpm Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys 9.9 Critical -
@paperclipai/servernpm Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands 8.7 High -
@paperclipai/servernpm Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode 8.3 High -
@paperclipai/servernpm Paperclip: Malicious skills able to exfiltrate and destroy all user data 7.3 High -
@paperclipai/servernpm Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution 8.8 High -
@paperclipai/servernpm Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass 10.0 Critical