Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Notícia de segurança recolhida automaticamente.

Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious agent and starting it.

A third flaw could expose sensitive data and control-plane details through application programming interface (API) routes

Fonte original: Ler artigo completo aqui