Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server

Description

The approval-resolution endpoints (POST /approvals/:id/approve, /reject, /request-revision) accept a client-supplied decidedByUserId field in the request body and write it verbatim into the authoritative approvals.decidedByUserId column — without cross-checking it against the authenticated actor.

Recommendation

Update the @paperclipai/server package to the latest compatible version. Followings are version details:

• Affected version(s): < 2026.416.0
• Patched version(s): 2026.416.0

References

• GHSA-p7mm-r948-4q3q
• CWE-345
• OWASP 2021-A8

Related Issues

• Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath - Vulnerability
• Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys - Vulnerability
• Paperclip: OS Command Injection via Execution Workspace cleanupCommand - Vulnerability
• Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution - CVE-2026-41208

You might also like:

Exploiting Server Version Disclosure

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

Tags:

npm

@paperclipai/server