Executive Summary
Two flaws in Paperclip, an open-source control plane for AI agent teams, let attackers execute host commands by importing and starting a malicious agent; a third could expose sensitive data via API routes.
What Happened
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious agent and starting it. A third flaw could expose sensitive data and control-plane details through application programming interface (API) routes
Affected Products
- Paperclip
Vulnerability / Attack Technique
Malicious agent import leading to host command execution
Technical Mechanism
Importing a crafted agent definition and starting it runs attacker commands on the server or developer machine.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Agent definitions are code. RealGround analysis: only import agents from trusted sources and review them first.
Recommended Controls
- Update Paperclip
- Import agent definitions only from trusted sources
- Run the control plane with minimal host privileges
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/paperclip-ai-flaws-let-attackers-run.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.