GitHub Advisory GHSA-832j-x75x-r6jc, Paperclip cleanup command injection

Evidence record

GHSA-832j-x75x-r6jc reports that a valid Paperclip agent API key could write cleanupCommand or teardownCommand in versions 2026.403.0 before 2026.416.0, leading to command execution when the workspace was archived.

Read the original source ↗

Claim-level citations (2)

• supportsPaperclip agent-key request could turn a later workspace cleanup into shell execution: GHSA-832j-x75x-r6jc reports that a valid Paperclip agent API key could write cleanupCommand or teardownCommand in versions 2026.403.0 before 2026.416.0, leading to command execution when the workspace was archived.

  GitHub advisory, Description, Affected versions and Fixed versions

• supportsPaperclip agent-key request could turn a later workspace cleanup into shell execution: The October 30 Paperclip advisory describes an agent-key holder setting cleanupCommand and teardownCommand, which are later executed by the server process when the workspace is archived; version 2026.416.0 is referenced as a fix.

  GHSA-832j-x75x-r6jc, Description and References to v2026.416.0