CERT24Paperclip AI flaws let unauthenticated attackers run commandsLoading data…

Paperclip AI flaws let unauthenticated attackers run commands

Three vulnerabilities in the open-source AI agent orchestration platform Paperclip exposed sensitive data and allowed unauthenticated command execution on servers and developers’ machines. Two flaws were rated critical, and one had a maximum CVSS score of 10.0.

← Back to intelligence

Paperclip AI flaws let unauthenticated attackers run commands

Three vulnerabilities in the open-source AI agent orchestration platform Paperclip exposed sensitive data and allowed unauthenticated command execution on servers and developers’ machines. Two flaws were rated critical, and one had a maximum CVSS score of 10.0.