Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys
Critical severity
GitHub Reviewed
Published
Apr 16, 2026
in
paperclipai/paperclip
•
Updated Apr 16, 2026
Give feedback on Dependabot alerts