CVE-2026-119713— Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands
Quick assessment
Affected
paperclipai @paperclipai/server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Paperclip 2026.403.0 至 2026.416.0（不含）版本中存在一个远程代码执行漏洞。该漏洞允许持有代理 API 密钥的攻击者通过 接口设置 和 参数。当工作空间被归档时， 函数会在 Paperclip 服务器进程上下文中通过 Shell 执行这些命令，从而在服务器主机上运行由攻击者指定的操作系统命令。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-119713
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands
Source: CVE Program / CVE List V5
Vulnerability Description
Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through a shell as the Paperclip server process, executing attacker-chosen OS commands on the server host.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| paperclipai | @paperclipai/server | 2026.403.0 ~ 2026.416.0 | - |
|
II. Public POCs for CVE-2026-119713
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-119713
请登录查看更多情报信息。
Other References for CVE-2026-119713 (6)
IV. Related Vulnerabilities
Same weakness: CWE-78
-
CVE-2026-119288
Zuke: Argument injection on Windows: batch shims are launche -
CVE-2026-91913
Dell OpenManage Enterprise 4.8.0 前版本命令注入漏洞 -
CVE-2026-118992
CallBackery versions before 0.62.0 for Perl allow OS command -
CVE-2026-101210
Dell OpenManage Enterprise 4.8.0 前版本 OS 命令注入漏洞 -
CVE-2026-101214
Dell OpenManage Enterprise 4.8.0 前版本 OS 命令注入漏洞