External Control of File Name or Path in Paperclip - #VU141315
Published: August 8, 2026
Vulnerability identifier: #VU141315
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-73
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to external control of file name or path in the execute() function in packages/adapters/claude-local/src/server/execute.ts when processing agent execution with an attacker-controlled adapterConfig.instructionsFilePath value. A remote user can modify agent configuration through the /api/agents/:id endpoint and trigger agent execution to disclose sensitive information.
The issue affects agent credentials that can modify their own adapterConfig, and the server reads the supplied path with fs.readFile() from the host filesystem.
Affected software
Paperclip
Remediation
Install security update from vendor's website.
Paperclip - update to 2026.416.0