Threats tagged 'ghsa-832j-x75x-r6jc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-119713Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key High8.72026-10-30GCVE DatabaseCVE-2026-119713 Paperclip versions from 2026.403.0 up to but not including 2026.416.0 contain a remote code execution vulnerability. This flaw allows users with agent API keys to set shell commands via a PATCH request to the execution workspace API. When the workspace is archived, these commands are executed by the Paperclip server process, enabling execution of arbitrary OS commands on the host. Report on CVE-2026-119713 Vulnerability CWE-78 #ghsa-832j-x75x-r6jc	GCVE Database	2026-10-30

Page 1 of 1