Description
Paperclip contains an arbitrary file read vulnerability that allows an attacker with an Agent API key to read files from the Paperclip server host filesystem. The vulnerability occurs because agents are allowed to modify their own adapterConfig through the /agents/:id API endpoint. The configuration field adapterConfig.
Recommendation
Update the @paperclipai/shared package to the latest compatible version. Followings are version details:
- Affected version(s): < 2026.416.0
- Patched version(s): 2026.416.0
References
Could your website be exposed too?
SmartScanner can check your website for Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath and gives you actionable findings to investigate.
Start a free scanRelated Issues
- obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/wr - Vulnerability
- PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments - CVE-2026-45623
- Prompty: Arbitrary file read via file reference expansion - CVE-2026-53598
- Arbitrary local file read vulnerability during template rendering - CVE-2023-25345
You might also like:
See something that needs correcting? Let us knowUpdated April 16, 2026