PyPI/aider-chat CVE-2026-10175: medium 6.3, EPSS 0.24%
Aider is vulnerable to Code Injection via editor_coder.run function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.86.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-2335
- https://nvd.nist.gov/vuln/detail/CVE-2026-10175
- https://github.com/Aider-AI/aider/issues/5058
- https://github.com/Aider-AI/aider
- https://vuldb.com/cve/CVE-2026-10175
- https://vuldb.com/submit/819909
- https://vuldb.com/vuln/367456
- https://vuldb.com/vuln/367456/cti
- https://pypi.org/project/aider-chat
- https://github.com/advisories/GHSA-7w7m-v5vp-w699
CVE-2026-10175 · published · modified · JSON