Known vulnerabilities in Paperclip

Vendor: Paperclip
Software: Paperclip
Software CPE: cpe:2.3:a:paperclipai:paperclip:*:*:*:*:*:*:*:*
Website: https://paperclip.ing/
Total vulnerabilities: 12
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Paperclip Paperclip is affected by 12 known vulnerabilities: 3 high, 5 medium, 4 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141316 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-41208		 CWE-78 Medium
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141315 - External Control of File Name or Path
 CWE-73 Low
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141314 - Command injection
 CWE-77 Low
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141313 - Missing Authorization
CVE-2026-77087		 CWE-862 High
No
No
 0.3.1 08.08.2026 SB2026080806
#VU141312 - Missing Authentication for Critical Function
 CWE-306 Medium
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141311 - Authorization Bypass Through User-Controlled Key
 CWE-639 Medium
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141310 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141309 - Insufficient Verification of Data Authenticity
 CWE-345 Low
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141308 - Improper Authorization
 CWE-285 Medium
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141307 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 High
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141306 - Improper Access Control
 CWE-284 Medium
No
No
 2026.416.0 08.08.2026 SB2026080744
#VU141235 - Improper Access Control
CVE-2026-41679		 CWE-284 High
Available
Exploited
 2026.416.0 07.08.2026 SB2026080744