CVE-2026-41679CWE-1188CWE-287CWE-862

Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

Critical · published April 23, 2026

CVSS v3.1
10.0
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authenticated` mode with default configuration. No user interaction, no credentials, just the target's address. The chain consists of six API calls. The attack is fully automated, requires no user interaction, and works against the default deployment configuration. Version 2026.416.0 patches the issue.

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.07365 · 94.4th percentile
Weaknesses
CWE-1188 · Initialization of a Resource with an Insecure Default; CWE-287 · Improper Authentication; CWE-862 · Missing Authorization
Published
2026-04-23T00:53Z
EPSS history
Timeline
  • 25 SEP 03:25Z
    EPSS moved 19% → 7%
    epss
  • 13 SEP 03:22Z
    EPSS moved 5% → 19%
    epss
  • 12 SEP 03:20Z
    EPSS moved 5% → 19%
    epss
  • 23 APR 00:53Z
    Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass
    cvelistv5