@paperclipai/server
npm3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting @paperclipai/serverpage 1 of 1
- CVE-2026-119713HIGHCVSS 8.8EG 8.8fixed in 2026.416.02026-10-30
Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, clea…
- CVE-2026-41208HIGHCVSS 8.8EG 8.8fixed in 2026.416.02026-04-23
Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Versions of @paperclipai/server prior to 2026.416.0 contain a privilege escalation vulnerability that allows an attacker with an Agent API …
- CVE-2026-41679CRITICALCVSS 10.0EG 10.0fixed in 2026.410.02026-04-23
Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instanc…
Check whether @paperclipai/server is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for @paperclipai/server CVEs against the assets you own.
Book a Demo →