HighVulnerability
CVE-2026-41208: Paperclip server privilege escalation through adapterConfig endpoint
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-41208
- Published
- Record updated
- Affected
- @paperclipai/server < 2026.416.0
- Fixed in
- 2026.416.0
- released April 16, 2026, 7 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.6%
Summary
Versions of @paperclipai/server prior to 2026.416.0 contain a privilege escalation flaw. Agents can update their own adapterConfig through the /agents/:id endpoint, and the server later executes adapterConfig.workspaceStrategy.provisionCommand during workspace provisioning. An attacker holding an Agent API key can inject shell commands that run on the Paperclip server host, which the source describes as remote code execution.
Mitigation
@paperclipai/server version 2026.416.0 fixes the issue.
Topics
Related items
- HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
- HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
- MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
- MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
- MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News