CyberSecBulletin

Aider-AI vulnerabilities

We track 2 vulnerabilities in Aider-AI products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Aider-AI vulnerabilities

  • 7.8 High severity

    aider: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-115726Aider-AI

    Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are

  • 7.8 High severity

    aider: Improper Control of Generation of Code

    CVE-2026-85674Aider-AI

    aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit), which aider runs throu