Threats affecting pkg:npm/@paperclipai/server

Paperclip versions 2026.403.0 through 2026.415.x contain a remote code execution vulnerability due to improper neutralization of special elements in OS commands. This flaw allows agent API key holders to set commands that are executed by the server process when a workspace is archived, enabling execution of arbitrary OS commands. The vulnerability is fixed in version 2026.416.0.

CVE-2026-41208 is a high-severity OS command injection vulnerability in versions of @paperclipai/server prior to 2026.416.0. It allows an attacker with an Agent API key to escalate privileges by injecting arbitrary shell commands through the adapterConfig.workspaceStrategy.provisionCommand field. This leads to remote code execution on the Paperclip server host. The vulnerability arises because the server executes this provisionCommand without proper neutralization of special elements, breaking the trust boundary between agent runtime and server host. The issue is fixed in version 2026.416.