CVE-2026-41679: exploitation status and patch state

CVE-2026-41679 · CVSS 10.0 CRITICAL · EPSS 3%

Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authenticated` mode with default configuration. No user interaction, no credentials, just the target's address. The chain consists of six API calls. The attack is fully automated, requires no user interaction, and works against the default deployment configuration. Version 2026.416.0 patches the issue.

Is CVE-2026-41679 exploited?

• Not in the CISA KEV catalog.
• EPSS puts exploitation in the next 30 days at 3%.
• Public exploit code: packaged in a public tool.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2026-41679

• Imported Agents Become Server Commands in Paperclip (2026-08-07)
• Metasploit Turns Paperclip AI Into a Live Target (2026-06-20)

Primary sources

• NVD record
• Metasploit: exploit/linux/http/paperclipai_unauth_rce_cve_2026_41679

What this record does not say

• No affected package data.
• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-08-11.