60
CVE-2026-41679
Unauthenticated RCE in Paperclip before 2026.416.0
- CVSS 3.1
- 10.0 critical
- EPSS
- 32%p98
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Paperclip, a Node.js server and React UI that orchestrates AI agents, allows full remote code execution before 2026.416.0. An unauthenticated attacker who can reach a default deployment running in authenticated mode needs only the instance address; the chain is six API calls, fully automated, with no credentials or user interaction. Network-accessible default instances are affected.
What to do: Upgrade Paperclip to 2026.416.0, which patches the issue.
| Product | Affected | Fixed in |
|---|---|---|
| paperclipai | prior to 2026.416.0 | 2026.416.0 |
| paperclipai/server | prior to 2026.416.0 | 2026.416.0 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authenticated` mode with default configuration. No user interaction, no credentials, just the target's address. The chain consists of six API calls. The attack is fully automated, requires no user interaction, and works against the default deployment configuration. Version 2026.416.0 patches the issue.
- Vendors
- paperclip
- Products
- paperclipai, paperclipai\/server
- Weakness
- CWE-287, CWE-862, CWE-1188
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H