CVE-2026-10174
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A vulnerability was identified in Aider version 0.86.3 in an unknown function of file aider/args.py in the Pre-commit Hook Handler component. Manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely, and the exploit is publicly available. The project was informed but did not respond.
Risk Assessment
Organizations using Aider are at risk of protection mechanism bypass, potentially allowing an attacker to perform unauthorized operations, possibly leading to repository integrity compromise.
Recommendation
Stop using Aider until a patch is released, or apply a temporary workaround such as restricting access to the tool.
Other vulnerabilities in Aider
See all- CVE-2026-115726High
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=True after model replies or /editor use, running commands with the victim's privileges.
- CVE-2026-85674High
aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit), which aider runs through a shell (subprocess with shell=True) without any user confirmation, LLM interaction, or API key. Consequently, a user who clones and runs aider inside an attacker-supplied repository achieves arbitrary command execution on their machine.
- CVE-2026-10177Medium
Vulnerability in Aider (Aider-AI) version 0.86.3 allows SSRF (Server-Side Request Forgery) through manipulation in the requests.get function of the api_docs.py file, affecting the AWS EC2 Metadata Endpoint component.
- CVE-2026-10176Medium
A vulnerability was found in Aider 0.86.3 by Aider-AI in the Code Generation Workflow component. An unknown functionality allows SQL injection. The attack can be performed remotely and the exploit has been published.
Original NVD description (English source)
A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Such manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS