{"data":{"id":"c98d1ade-c9fd-4c40-84d8-ba9117dafbdf","title":"CVE-2026-41208: Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Versions of…","summary":"Versions of @paperclipai/server prior to 2026.416.0 contain a privilege escalation flaw. Agents can update their own adapterConfig through the /agents/:id endpoint, and the server later executes adapterConfig.workspaceStrategy.provisionCommand during workspace provisioning. An attacker holding an Agent API key can inject shell commands that run on the Paperclip server host, which the source describes as remote code execution.","solution":"@paperclipai/server version 2026.416.0 fixes the issue.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41208","publishedAt":"2026-04-23T02:16:18.670Z","cveId":"CVE-2026-41208","cweIds":["CWE-78"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@paperclipai/server@< 2026.416.0 (fixed: 2026.416.0)"],"affectedPackageNames":["@paperclipai/server"],"affectedPackageRefs":["npm:@paperclipai/server"],"affectedVendors":[],"affectedVendorsRaw":["Paperclip"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Paperclip server privilege escalation through adapterConfig endpoint","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00591,"epssCheckedAt":"2026-11-10T00:11:23.264Z","kevDateAdded":null,"advisoryAliases":["GHSA-265w-rf2w-cjh4"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:19.953Z","patchAvailable":true,"disclosureDate":"2026-04-23T02:16:18.670Z","fixReleasedAt":"2026-04-16T11:44:05.798Z","daysToFix":-7,"fixCheckedAt":"2026-10-29T21:37:41.632Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@paperclipai/server","fixedVersion":"2026.416.0","matchedVersion":"2026.416.0","fixReleasedAt":"2026-04-16T11:44:05.798Z","daysToFix":-7,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:37:41.485Z"}]}}