Security advisories

critical2026-04-16

Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise

GHSA-3xx2-mqjm-hg9x

medium2026-04-16

Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-markdown sanitization

GHSA-fpw4-p57j-hqmq

medium2026-04-16

Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server

GHSA-p7mm-r948-4q3q

critical2026-04-16

Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys

GHSA-47wq-cj9q-wpmp

critical2026-04-16

Paperclip: OS Command Injection via Execution Workspace cleanupCommand

GHSA-vr7g-88fq-vhq3

high2026-04-16

Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email

GHSA-gqqj-85qm-8qhf

high2026-04-16

Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode

GHSA-xfqj-r5qw-8g4j

high2026-04-16

Paperclip: Malicious skills able to exfiltrate and destroy all user data

GHSA-w8hx-hqjv-vjcq

high2026-04-16

CVE-2026-41208-Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution

GHSA-265w-rf2w-cjh4

medium2026-04-16

Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath

GHSA-3pw3-v88x-xj24

critical2026-04-10

CVE-2026-41679-paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

GHSA-68qg-g8mg-6pr7