Aider
Aider-AI · 4 CVEs
CVE-2026-85674
HIGH
aider 0.86.2 Remote Code Execution via .aider.conf.yml
Sep 4, 2026
CVE-2026-10177
MEDIUM
Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery
May 31, 2026
CVE-2026-10176
MEDIUM
Aider-AI Aider Code Generation Workflow sql injection
May 31, 2026
CVE-2026-10175
MEDIUM
Aider-AI Aider Architect Mode auth.py editor_coder.run code injection
May 31, 2026
CVE-2026-10174
MEDIUM
Aider-AI Aider Pre-commit Hook args.py protection mechanism
May 31, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-85674 | aider 0.86.2 Remote Code Execution via .aider.conf.yml | HIGH | 0.25% | Sep 4, 2026 |
| CVE-2026-10177 | Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery | MEDIUM | 0.21% | May 31, 2026 |
| CVE-2026-10176 | Aider-AI Aider Code Generation Workflow sql injection | MEDIUM | 0.20% | May 31, 2026 |
| CVE-2026-10175 | Aider-AI Aider Architect Mode auth.py editor_coder.run code injection | MEDIUM | 0.24% | May 31, 2026 |
| CVE-2026-10174 | Aider-AI Aider Pre-commit Hook args.py protection mechanism | MEDIUM | 0.23% | May 31, 2026 |
Showing 1 to 4 of 4 CVEs