vulnerability Critical Paperclip Flaw Allowed Admin Access, Code Execution A critical vulnerability (CVE-2026-41679) in Paperclip, an AI management platform, allowed remote attackers to gain administrative access and execute code on the server, potentially exposing sensitive data and internal services. The flaw stemmed from a missing authorization check during company import, enabling attacke… SecurityWeek · Aug 6, 2026 Critical CVE-2026-41679aivulnerabilitycode-execution
threat-intel AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code A security flaw in AWS Kiro, an AI coding assistant, allowed an attacker to rewrite its configuration file and execute arbitrary code on a developer's machine simply by inserting malicious text into a seemingly innocuous… The Hacker News · Jul 21, 2026 High CVE-2026-10591prompt-injectionai-securitycode-execution