Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys

Description

Isolated paperclip instance running in authenticated mode (default config) on a clean Docker image matching commit b649bd4 (2026.411.0-canary.8, post the 2026.410.0 patch).

Recommendation

Update the @paperclipai/server package to the latest compatible version. Followings are version details:

• Affected version(s): < 2026.416.0
• Patched version(s): 2026.416.0

References

• GHSA-47wq-cj9q-wpmp
• CWE-1220
• CWE-285
• CWE-639
• CWE-862
• OWASP 2021-A1

Related Issues

• Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise - Vulnerability
• Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode - Vulnerability
• Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution - CVE-2026-41208
• Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server - Vulnerability

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@paperclipai/server