Live › vulnerability › CVE-2026-119713
Paperclip 2026.403.0 before 2026.416.0 lets anyone holding an agent API key set cleanup and teardown commands on an execution workspace through its PATCH endpoint. When the workspace is archived, the server runs those commands through a shell as the Paperclip server process, so an attacker can execute arbitrary OS commands on the host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 16:31 UTC. All times on this page are UTC.
Teams running Paperclip between 2026.403.0 and 2026.416.0 where agent API keys are held by parties who should not control the server. The exposure comes from the PATCH endpoint for execution workspaces and the archive path that runs the stored commands through a shell. Installs on fixed versions, or where no untrusted party holds an agent key, are less exposed.
No product ranges from the sources yet.
2026.403.0 to 2026.416.02026.416.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through a shell as the Paperclip server process, executing attacker-chosen OS commands on the server host.
This page as .md · .json · in your agent: get_signal("CVE-2026-119713")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.