Main
Vulnerability Database
Exploits
ID:12884 - Exploit for Improper access control in Paperclip - CVE-2026-41679
ID:12884 - Exploit for Improper access control in Paperclip - CVE-2026-41679
Published: August 7, 2026
Vulnerability identifier: #VU141235
Vulnerability risk: High
CVE-ID: CVE-2026-41679
CWE-ID: CWE-284
Exploitation vector: Remote access
Vulnerable software:
Paperclip
Paperclip
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code.
The vulnerability exists due to improper access control in the import authorization mechanism when handling import requests. A remote attacker can bypass authorization and submit a crafted import request to execute arbitrary code.
Remediation
Install security update from vendor's website.