Horizon Alert
Summary of the vulnerability and why it matters
This critical vulnerability allows an unauthenticated attacker to execute arbitrary code on Paperclip, a Node.js server for AI agents. The issue is present in default configurations and requires no special access or user interaction, making any network-accessible instance vulnerable.
- Attackers can gain full control.
- No user interaction or credentials needed.
- Affects default deployments.
Attack Path
How an attacker could exploit the issue
An unauthenticated attacker can compromise any network-accessible Paperclip instance running the default configuration. The attacker would chain six API calls to achieve full remote code execution without needing any credentials or user interaction.
- No user authentication required.
- Network-accessible attack surface.
- Exploitable with default configuration.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability presents a significant risk as it allows unauthenticated remote code execution against internet-accessible Paperclip instances. Attackers are likely to target this due to the ease of exploitation, requiring no credentials or user interaction, and its potential for widespread impact given the default configuration. The automated attack chain makes it an attractive target for automated scanning and exploitation.
- No authentication needed for RCE.
- Critical vulnerability in a business orchestration tool.
- Exploitation is fully automated.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Prioritize immediate mitigation for Paperclip instances, as an unauthenticated attacker can achieve full remote code execution. Given the critical nature and lack of authentication bypass, affected services should be isolated or taken offline until patched to prevent widespread compromise.
- Apply Paperclip version 2026.416.0 or later.
- Isolate network-accessible instances.
- Monitor for anomalous API activity.
