aider vulnerabilities
CVEs whose affected-version data names the aider package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-115726High· 7.8Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or …
▾ TwilightAider-AI · aiderEPSS 0.16%via CVEORG
CVE-2026-85674High· 7.8aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in
aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit),…
▾ TwilightAider-AI · aiderEPSS 0.25%via NVD