Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-09 · source-backed
Oasis Security disclosed a chain in Paperclip, an AI management platform for running autonomous agents at scale, affecting network-accessible instances in default authenticated mode (SecurityWeek). No invitation, no verified mailbox: register, sign in, create and self-approve a CLI authorization challenge to mint a board API token, then hit the company-import route (which enforced only board-level access, while direct company creation required instance admin) with a crafted .paperclip.yaml defining an agent using a host-level execution adapter. Oasis also found a DNS-rebinding weakness where local-dev mode trusts everything reaching 127.0.0.1, letting an attacker-controlled webpage run commands on a developer's machine.
Each link below shares sources, entities, or timing with this story.
Oasis Security criticizes paperclip / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Oasis Security criticizes paperclip); both cover Oasis, Oasis Security, SecurityWeek; reported by the same outlet (securityweek.com).
Oasis Security criticizes paperclip / Shared entities / Earlier coverage
Linked by a graph relationship (Oasis Security criticizes paperclip); both cover Oasis, Oasis Security; earlier Oasis coverage from 2026-07-29.
Oasis Security criticizes OpenClaw / Shared entity: CVE / Shared topic / Earlier coverage
Linked by a graph relationship (Oasis Security criticizes OpenClaw); both cover CVE; overlapping topics (agent, execution).
Oasis Security criticizes OpenClaw / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Oasis Security criticizes OpenClaw); both cover CVE, CVSS; overlapping topics (authenticated, authorization).
Oasis Security criticizes OpenClaw / Shared entity: CVE / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Oasis Security criticizes OpenClaw); both cover CVE; reported by the same outlet (securityweek.com).
Oasis Security criticizes paperclip / Shared entity: Oasis Security / Earlier coverage
Linked by a graph relationship (Oasis Security criticizes paperclip); both cover Oasis Security; earlier Oasis Security coverage from 2026-03-01.
Shared entities / Earlier coverage / Tension
Both cover CVE, CVSS, DNS; earlier CVE coverage from 2026-02-21; pushes against this story (but).
Oasis Security criticizes OpenClaw / Shared entities / Earlier coverage
Linked by a graph relationship (Oasis Security criticizes OpenClaw); both cover CVE, CVSS; earlier CVE coverage from 2026-04-21.