{"data":{"id":"eae7f315-0076-4537-9c39-ccf4635a5e40","title":"GHSA-47wq-cj9q-wpmp: Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys","summary":"The Paperclip agent routes POST, GET and DELETE on /api/agents/:id/keys (server/src/routes/agents.ts, lines 2050-2087) call only assertBoard and never assertCompanyAccess, so any authenticated board user can mint a plaintext pcp_* agent API token for an agent in any company. The token is bound to the victim agent's companyId, which lets an attacker perform operations inside the victim tenant. The same assertBoard-only pattern appears on the pause, resume, terminate and delete agent handlers.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-47wq-cj9q-wpmp","publishedAt":"2026-04-16T22:48:32.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@paperclipai/server@< 2026.416.0 (fixed: 2026.416.0)"],"affectedPackageNames":["@paperclipai/server"],"affectedPackageRefs":["npm:@paperclipai/server"],"affectedVendors":[],"affectedVendorsRaw":["Paperclip"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-47wq-cj9q-wpmp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-16T22:48:32.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}