Critical, CVSS 10.0npmAmendedPublished
paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass
CVE-2026-41679 · GHSA-68qg-g8mg-6pr7
- Affected
- npm paperclipai < 2026.410.0
- Fixed in
- 2026.410.0· Vendor fix available
- Issue
- An unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in authenticated mode with default configuration. No user interaction, no credentials, just the target's address. The entire chain is six API calls. I verified every step against the latest version. I have a fully automated PoC script and a video recording available. Discord: sagi03581 Steps to Reproduce The attack chains four independent flaws to escalate from zero access to RCE: Step 1: Create an account (no invite, no email verification) Returns a valid account immediately. No invite token required, no email verification. This works because PAPERCLIPAUTHDISABLESIGNUP defaults to false in server/src/config.ts:169-173: And email verification is hardcoded off in server/src/auth/better-auth.ts:89-93: The environment variable isn't documented in the deployment guide, so operators don't know it exists. Step 2: Sign in Capture the session cookie from the…
Recommended action: Upgrade to 2026.410.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.