Security
فارسی
All products

@paperclipai/server

npm · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization BypassCVE-2026-41679 · GHSA-68QG-G8MG-6PR7 @paperclipai/serverpaperclipai npm Critical Fix reported
Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command ExecutionCVE-2026-41208 · GHSA-265W-RF2W-CJH4 @paperclipai/server npm High Fix reported
Paperclip: OS Command Injection via Execution Workspace cleanupCommandGHSA-VR7G-88FQ-VHQ3 @paperclipai/server npm Critical Fix reported
Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated ModeGHSA-XFQJ-R5QW-8G4J @paperclipai/server npm High Fix reported
Paperclip: Malicious skills able to exfiltrate and destroy all user dataGHSA-W8HX-HQJV-VJCQ @paperclipai/server npm High Fix reported
Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip serverGHSA-P7MM-R948-4Q3Q @paperclipai/server npm Medium Fix reported
Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromiseGHSA-3XX2-MQJM-HG9X @paperclipai/server npm Critical Fix reported
Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keysGHSA-47WQ-CJ9Q-WPMP @paperclipai/server npm Critical Fix reported