PT-2026-34600 · Npm · @Paperclipai/Server

Lilmingwa13 · Published 2026-04-16 · Updated 2026-04-23 · CVE-2026-41208

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions @paperclipai/server versions prior to 2026.416.0

Description An issue in the Node.js server and React UI used to orchestrate AI agents allows an attacker with an Agent API key to execute arbitrary OS commands on the server host. This occurs because agents can update their own adapterConfig via the '/agents/:id' API endpoint. Specifically, the server runtime executes the adapterConfig.workspaceStrategy.provisionCommand field, enabling an attacker to inject shell commands during workspace provisioning and escalate privileges from the agent runtime to the server host.

Recommendations Update to version 2026.416.0.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-41208

GHSA-265W-RF2W-CJH4

Affected Products

@Paperclipai/Server

References · 6

• 🔥 https://github.com/paperclipai/paperclip/security/advisories/GHSA-265w-rf2w-cjh4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-41208 · Security Note
• https://osv.dev/vulnerability/GHSA-265w-rf2w-cjh4 · Vendor Advisory
• https://github.com/paperclipai/paperclip · Note
• https://twitter.com/jeftovic/status/2047298369949712621 · Twitter Post
• https://twitter.com/CVEnew/status/2047359898556506183 · Twitter Post