CVE-2026-10177
2 advisories.
PyPI/aider-chat CVE-2026-10177: medium 6.3, EPSS 0.21%
Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.86.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hchg-qm84-cj9p
- https://nvd.nist.gov/vuln/detail/CVE-2026-10177
- https://github.com/Aider-AI/aider/issues/5075
- https://github.com/Aider-AI/aider/pull/5137
- https://github.com/Aider-AI/aider
- https://vuldb.com/cve/CVE-2026-10177
- https://vuldb.com/submit/819911
- https://vuldb.com/vuln/367458
- https://vuldb.com/vuln/367458/cti
CVE-2026-10177 · published · modified · JSON
PyPI/aider-chat CVE-2026-10177: medium 6.3, EPSS 0.21%
Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.86.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-2336
- https://nvd.nist.gov/vuln/detail/CVE-2026-10177
- https://github.com/Aider-AI/aider/issues/5075
- https://github.com/Aider-AI/aider/pull/5137
- https://github.com/Aider-AI/aider
- https://vuldb.com/cve/CVE-2026-10177
- https://vuldb.com/submit/819911
- https://vuldb.com/vuln/367458
- https://vuldb.com/vuln/367458/cti
- https://pypi.org/project/aider-chat
- https://github.com/advisories/GHSA-hchg-qm84-cj9p
CVE-2026-10177 · published · modified · JSON