Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two flaws in Paperclip, an open-source control plane for AI agent teams, let an attacker run commands on a server or developer machine by importing a malicious agent and starting it; the server-side path, CVE-2026-41679, carries a CVSS score of 10.0 and...