Description
Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through a shell as the Paperclip server process, executing attacker-chosen OS commands on the server host.
Published: 2026-10-30
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

Paperclip Server versions 2026.403.0 through 2026.415.x contain an input validation flaw that allows any holder of an agent API key to set the cleanupCommand and teardownCommand fields of an execution workspace via a PATCH request. When the workspace is archived, the server process executes these commands through a shell, granting the attacker remote code execution on the host operating system. The vulnerability is a classic OS command injection (CWE‑78).

Affected Systems

The affected product is Paperclip Server on the paperclipai/server platform. The flaw exists in releases starting at 2026.403.0 and continues through any release prior to 2026.416.0. Administrators should verify the installed version against this range and upgrade if necessary.

Risk and Exploitability

The exploit is scored at CVSS 8.7, indicating high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Attackers require valid agent API credentials, implying either insider threat or compromised accounts. The likely attack vector is through the REST API; once malicious cleanup commands are set, the workspace archive trigger will execute them in the system shell. Although authentication is required, the impact is severe if credentials are exposed.

Generated by OpenCVE AI on October 30, 2026 at 16:32 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the official patch to version 2026.416.0 or newer to eliminate the command injection flaw.
  • Revoke or rotate all agent API keys that have write access to execution workspaces and restrict API usage to read‑only where possible.
  • Temporarily disable the execution workspace cleanup and teardown commands, or modify the server configuration to block shell execution of these commands.

Generated by OpenCVE AI on October 30, 2026 at 16:32 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 30 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Description Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through a shell as the Paperclip server process, executing attacker-chosen OS commands on the server host.
Title Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands
First Time appeared Paperclip
Paperclip paperclipai\/server
Weaknesses CWE-78
CPEs cpe:2.3:a:paperclip:paperclipai\/server:*:*:*:*:*:*:*:*
Vendors & Products Paperclip
Paperclip paperclipai\/server
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Paperclip Paperclipai\/server
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-30T15:16:12.174Z

Reserved: 2026-10-30T14:49:26.057Z

Link: CVE-2026-119713

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-30T16:17:54.567

Modified: 2026-10-30T16:17:54.567

Link: CVE-2026-119713

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-30T16:45:15Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')