{"data":{"id":"e3772aa2-19bc-46c6-9dc5-a742f8f44984","title":"GHSA-vr7g-88fq-vhq3: Paperclip: OS Command Injection via Execution Workspace cleanupCommand","summary":"Paperclip AI v2026.403.0 contains an OS command injection flaw in the Execution Workspace lifecycle (workspace-runtime.ts). The PATCH /api/execution-workspaces/:id endpoint stores an arbitrary cleanupCommand without validation, and the server later runs it through spawn(shell, [\"-c\", cleanupCommand]) when the workspace is archived. In local_trusted mode, which is the default for desktop installations, exploitation requires no authentication, and the commands run with the privileges of the Paperclip server process.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-vr7g-88fq-vhq3","publishedAt":"2026-04-16T22:48:09.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@paperclipai/server@< 2026.416.0 (fixed: 2026.416.0)"],"affectedPackageNames":["@paperclipai/server"],"affectedPackageRefs":["npm:@paperclipai/server"],"affectedVendors":[],"affectedVendorsRaw":["Paperclip AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-vr7g-88fq-vhq3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-16T22:48:09.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}