Affected Systems

Paperclip open-source AI agent control plane, versions prior to v2026.416.0. CVE-2026-41679 (CVSS 10.0) affects network-accessible authenticated deployments with default registration. GHSA-x8hx-rhr2-9rf7 (CVSS 9.6) affects local_trusted mode (default for local development).

Exploitation Status

Proof-of-concept available. Rapid7 published a Metasploit module for CVE-2026-41679 in June 2026. CISA SSVC classifies exploitation as proof-of-concept. No in-the-wild exploitation reported as of August 5, 2026. Not listed in CISA KEV catalog.

Business Impact

Attackers can execute arbitrary OS commands with server process privileges (CVE-2026-41679) or developer user privileges (GHSA-x8hx-rhr2-9rf7). Impact includes access to application data, source repositories, locally stored credentials, secrets available to agent processes, and internal services reachable from the host. CVE-2026-41679 requires no victim interaction on internet-facing instances with default open registration. DNS rebinding attack (GHSA-x8hx-rhr2-9rf7) requires user to visit attacker-controlled page while Paperclip runs locally. Third vulnerability exposes sensitive data via unprotected API routes (no CVE or patch version identified).

Urgency

🔴 Immediate

Recommended Actions

  • Update Paperclip to v2026.416.0 or later immediately to address CVE-2026-41679 and import authorization flaws
  • Review and disable open registration on network-accessible Paperclip deployments; require invitation or email verification for new accounts
  • Audit existing Paperclip companies and agents for unauthorized imports or suspicious process-based agents created by recently registered users
  • If running Paperclip in local_trusted mode for development, avoid browsing untrusted websites while the service is active; consider binding to specific interfaces with authentication
  • Review service account privileges for Paperclip server processes and apply least-privilege principles to limit RCE impact