Agentic-AiCVE-2026-41265 - Flowise Airtable Agent code injection RCEMay 2, 2026GHSA-3xx2/GHSA-47wq - Paperclip agent key tenant-boundary bypassMay 2, 2026GHSA-vr7g-88fq-vhq3 - Paperclip workspace cleanup command injectionMay 2, 2026GHSA-xh72/GHSA-xmxx - OpenClaw agent-surface fail-closed bypassesMay 2, 2026