https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T20:19:53.124534+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-77087 CVE-2026-77087 — Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding 2026-10-10T20:19:53.139498+00:00

Affected: paperclipai paperclip

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated API requests and execute commands through the process adapter.