Critical Paperclip Flaw Allowed Admin Access, Code Execution
Source SecurityWeek
Mentioned vulnerabilities
Rated Critical by Threat Radar from the SecurityWeek text
Data as of 7 Aug 2026, 05:40 UTC
What to do
AI-suggested
Paperclip has released fixes that apply authorization checks to the import preview and execution flows and tighten company scoping to require appropriate privileges. The vendor also resolved missing authorization on API routes and the DNS rebinding issue in local development mode. Users should update to the fixed versions as soon as possible. Patch status is confirmed by the vendor's advisory. No additional mitigation is required beyond applying the official fixes.
Description
An attacker could self-register, sign in for board-level API access, and import a new company for code execution. The post Critical Paperclip Flaw Allowed Admin Access, Code Execution appeared first on SecurityWeek .