CVE-2026-41679

CVSS 10.0 · CRITICAL
2 public PoCs
Proof-of-concept code linked in references
EPSS p61
Higher than 61% of all CVEs — moderate exploitation risk.
Patch available
Vendor advisory or patch linked

Published 4/23/2026 · updated 6/17/2026 · CWE-287, CWE-862, CWE-1188

Share
Get asset-aware triage

Summary

Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authenticated` mode with default configuration. No user interaction, no credentials, just the target's address. The chain consists of six API calls. The attack is fully automated, requires no user interaction, and works against the default deployment configuration. Version 2026.416.0 patches the issue.

CVSS 10.0 — CRITICAL

10.0 / 10
  • AV: Network
  • AC: Low complexity
  • PR: No privileges
  • UI: No user interaction
  • S: Scope changed
  • C: Confidentiality: High
  • I: Integrity: High
  • A: Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS exploitation probability

1.1%

Percentile p61 — Higher than 61% of all CVEs — moderate exploitation risk.

Affected products

2 vendor/product entries
  • Paperclip Paperclipai< 2026.416.0
  • Paperclip Paperclipai\/Server< 2026.416.0
Do you run any of these? Sign in to match this CVE against your SBOM and asset inventory automatically.

Timeline

  1. Apr 23, 2026 · Disclosed / published in NVD
  2. Jun 17, 2026 · Intel last updated

Intel sources

Which upstream feeds returned data for this CVE, and when they were last fetched.

  • NVD· 93 days ago
  • CVE.org· no data
  • FIRST EPSS· 93 days ago
  • CISA KEV· no data
  • OSV· 93 days ago

References

Unlock the full report

See how CVE-2026-41679 hits your stack.

Free public data ends here. Sign in to correlate this CVE against your SBOM and assets, get an AI-grounded exploit chain, generate a ModSecurity virtual patch, and share findings with your team.

  • · Asset-aware CVSS & priority
  • · Grounded AI analysis (A–D graded)
  • · Auto-generated WAF / IPS rules
  • · Jira, SIEM, Slack, Teams delivery

No credit card · 100 free enrichments · analyst-grade citations.