Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email
- Severity:
- High
Description
A Paperclip-managed codex_local runtime was able to access and use a Gmail connector that I had connected in the ChatGPT/OpenAI apps UI, even though I had not explicitly connected Gmail inside Paperclip or separately inside Codex.
In my environment this enabled mailbox access and a real outbound email to be sent from my Gmail account.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 2026.403.0
References
Related Issues
- Paperclip: Malicious skills able to exfiltrate and destroy all user data - Vulnerability
- Gatsby develop server has Local File Inclusion vulnerability - CVE-2023-34238
- FUXA local file inclusion vulnerability - CVE-2023-31718
- Websites were able to send any requests to the development server and read the response in vite - CVE-2025-24010
You might also like:
- Tags:
- npm
- paperclipai
Anything's wrong? Let us know Last updated on April 16, 2026