CVEs / CVE-2026-41679
CVE-2026-41679: paperclipai paperclip vulnerability
- critical 10 CVSS 3.1 (from the CNA)
- EPSS 31.6% chance of exploitation in the next 30 days, higher than 98% of CVEs (30 Oct 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2026-41679
Description
Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authenticated` mode with default configuration. No user interaction, no credentials, just the target's address. The chain consists of six API calls. The attack is fully automated, requires no user interaction, and works against the default deployment configuration. Version 2026.416.0 patches the issue.
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| paperclipai paperclip | < 2026.410.0 | — |
| paperclipai @paperclipai/server | < 2026.410.0 | — |
| Product | Affected | Fixed in |
|---|---|---|
| paperclipai (npm) | before 2026.410.0 | 2026.410.0 |
| @paperclipai/server (npm) | before 2026.410.0 | 2026.410.0 |
Package versions from GHSA-68qg-g8mg-6pr7.
Exploitation
Not in the CISA Known Exploited Vulnerabilities catalog as of 30 Oct 2026.
Severity
| CVSS 3.1 | 10 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HScored by the CNA ([email protected]) |
|---|---|
| Weakness | CWE-287, CWE-862, CWE-1188 |
References
- CVE-2026-41679 on NVD
- CVE-2026-41679 on OSV
- https://github.com/paperclipai/paperclip/security/advisories/GHSA-68qg-g8mg-6pr7 Exploit, Mitigation, Third Party Advisory
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.