CVE-2026-41208

OVERVIEW CVE-2026-41208 is a privilege escalation vulnerability in Paperclip, a Node.js-based business orchestration platform that coordinates AI agent teams. Affected versions of @paperclipai/server prior to 2026.416.0 allow attackers with valid Agent API credentials to execute arbitrary operating system commands on the Paperclip server host by injecting malicious shell commands into the adapterConfig.workspaceStrategy.provisionCommand field via the /agents/:id API endpoint. SEVERITY The vulnerability carries a CVSS score of 8.8 (HIGH) with a network-based attack vector, low complexity, and low privilege requirements. An attacker with a legitimate agent credential can exploit this flaw without user interaction to achieve complete compromise of the server host, including unauthorized access (confidentiality), modification (integrity), and disruption (availability) of critical systems. The attack breaks the intended trust boundary between agent runtime and server execution contexts. EXPLOITATION STATUS There is no evidence of active exploitation in the wild, with the vulnerability absent from the CISA Known Exploited Vulnerabilities catalog and maintaining inactive status on exploit tracking lists. The low EPSS score of 0.0023 indicates minimal real-world exploitation probability. However, the vulnerability's straightforward exploitation path and high severity warrant immediate patching to version 2026.416.0, particularly for organizations operating Paperclip instances with untrusted or compromised agent credentials.