Skip to content
OpenAdvisories

Vendor

Aider-AI

6 known vulnerabilities.

Products

Aider 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-115726

    Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings

    Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are…

    Aider-AI Aider
  • High 7.8
    CVE-2026-85674

    aider 0.86.2 Remote Code Execution via .aider.conf.yml

    aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit), which aider runs thro…

    Aider-AI Aider