CVE-2026-41679 Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass
Unauthenticated attackers can achieve remote code execution on Paperclip instances via an import authorization bypass chain.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-41679?
CVE-2026-41679 is a critical authentication bypass vulnerability in @paperclipai/server, published on 23 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authenticated` mode with default configuration. No user interaction, no credentials, just the target's address. The chain consists of six API calls. The attack is fully automated, requires no user interaction, and works against the default deployment configuration. Version 2026.416.0 patches the issue.
Which versions are affected by CVE-2026-41679?
4 open source packages ship an affected version, including @paperclipai/server and paperclipai. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
@paperclipai/server npm | All versions | 2026.410.0 |
@paperclipai/server npm | All versions | 2026.410.0 |
paperclipai npm | All versions | 2026.410.0 |
paperclipai npm | All versions | 2026.410.0 |
Products include Paperclip Paperclipai, Paperclip Paperclipai\/Server.
How do I fix CVE-2026-41679?
Upgrade @paperclipai/server to 2026.410.0 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-41679 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-41679 exists.
Public exploit code: 1 Metasploit module, 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in @paperclipai/server
Sources
Also known as GHSA-68qg-g8mg-6pr7.