Critical Paperclip bugs expose AI agent trust failures

Security researchers discovered three critical vulnerabilities in Paperclip, an open-source AI agent platform, that could allow attackers to execute code remotely (RCE, where an attacker runs commands on a system they don't own), access sensitive data, and compromise developer machines. All three flaws stemmed from the same underlying problem: Paperclip incorrectly trusted certain requests and user actions without proper verification, allowing attackers to bypass authorization checks and gain control over privileged agent operations.