Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath

Description

Paperclip contains an arbitrary file read vulnerability that allows an attacker with an Agent API key to read files from the Paperclip server host filesystem. The vulnerability occurs because agents are allowed to modify their own adapterConfig through the /agents/:id API endpoint. The configuration field adapterConfig.

Recommendation

Update the @paperclipai/shared package to the latest compatible version. Followings are version details:

• Affected version(s): < 2026.416.0
• Patched version(s): 2026.416.0

References

• GHSA-3pw3-v88x-xj24
• CWE-73
• OWASP 2021-A4

Related Issues

• obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/wr - Vulnerability
• PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments - CVE-2026-45623
• Prompty: Arbitrary file read via file reference expansion - CVE-2026-53598
• Arbitrary local file read vulnerability during template rendering - CVE-2023-25345

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@paperclipai/shared