Paperclipai vulnerabilities

Products

• @paperclipai/server 3
• Paperclip 2

Newest

• paperclipai paperclip Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding CVE-2026-77087 9.4 CriticalAugust 21, 2026
• paperclipai @paperclipai/server Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands CVE-2026-119713 Fix available 8.7 HighApril 16, 2026
• paperclip paperclipai, paperclipai @paperclipai/server +1 more Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution CVE-2026-41208 Fix available 8.8 HighApril 16, 2026
• paperclipai paperclip, paperclip paperclipai, paperclipai\/server +1 more +3 more Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass CVE-2026-41679 Known exploitedPublic exploitFix available EPSS 31.7% 10.0 CriticalApril 10, 2026