cve-2026-41679

CVE-2026-41679 Einleitung Dieser POC testet, ob eine Paperclip-AI-Instanz anfällig für CVE-2026-41679 ist. Er folgt den Schritten aus diesem Artikel. Verwendung Führen Sie die folgenden Befehle aus: root@kitploit: git clone [email protected]:bartfroklage/cve-2026-41679.git cd cve-2026-41679...

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane for teams of artificial intelligence AI agents, and both paths rely on importing a malicious agent and starting it. A third flaw could expo...

companies.sh (>=2026.324.0-canary.0, <=2026.325.0-canary.3), corporateai (2026.328.0-canary.0) +3 more potentially affected by CVE-2026-41679 via @paperclipai/server (>=2026.3.17-canary.3, <=2026.415.0-canary.7)

@paperclipai/server NPM version =2026.3.17-canary.3, =2026.324.0-canary.0, =2026.3.17-canary.3, =0.6.5, =0.6.6 Source cves: CVE-2026-41679 Source advisory: SNYK:JS-PAPERCLIPAISERVER-16189082...

companies.sh (>=2026.324.0-canary.0, <=2026.325.0-canary.3) potentially affected by CVE-2026-41679 via paperclipai (2026.324.0-canary.7)

paperclipai NPM version 2026.324.0-canary.7 is affected by a known vulnerability. The following packages have a transitive dependency on paperclipai and may be impacted: - companies.sh =2026.324.0-canary.0, =2026.325.0-canary.3 Source cves: CVE-2026-41679 Source advisory: OSV:GHSA-68QG-G8MG-6PR7...

companies.sh (>=2026.324.0-canary.0, <=2026.325.0-canary.3), corporateai (2026.328.0-canary.0) +2 more potentially affected by CVE-2026-41679 via @paperclipai/server (>=2026.3.17-canary.3, <=2026.409.0-canary.4)

@paperclipai/server NPM version =2026.3.17-canary.3, =2026.324.0-canary.0, =2026.3.17-canary.3, =2026.409.0-canary.4 Source cves: CVE-2026-41679 Source advisory: OSV:GHSA-68QG-G8MG-6PR7...