AIThe Hacker Newsabout 4 hours ago
Paperclip Flaws Allow Host Command Execution
1 min read
Two critical Paperclip flaws let attackers run host commands via malicious agent imports, tracked as CVE-2026-41679 (CVSS 10.0) and GHSA-x8hx-rhr2-9rf7 (CVSS 9.6). A third flaw, GHSA-xfqj-r5qw-8g4j (CVSS 8.3), exposed sensitive data. Paperclip fixed all in v2026.416.0. Rapid7 shipped a Metasploit module.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
