A critical security vulnerability in the open-source Paperclip AI agent orchestration platform allowed attackers to execute arbitrary commands on exposed servers or developers' local machines. The flaw, tracked as CVE-2026-41679 and rated with the maximum CVSS score of 10.0, was fixed in version 2026.416.