{"id":"CVE-2026-115726","title":"Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings","summary":"Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-78"],"vendor":"Aider-AI","product":"aider","affected":["aider <= 0.86.2"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T11:36:49.084Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115726","references":[{"url":"https://github.com/Aider-AI/aider/issues/5885"},{"url":"https://github.com/Aider-AI/aider/blob/v0.86.2/aider/io.py#L1088-L1094"},{"url":"https://github.com/Aider-AI/aider/blob/v0.86.2/aider/editor.py#L89-L134"},{"url":"https://github.com/Aider-AI/aider/blob/v0.86.2/aider/main.py#L464-L479"},{"url":"https://www.vulncheck.com/advisories/aider-through-0.86.2-command-execution-via-repository-aider-conf-yml-settings","label":"VulnCheck Advisory: Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T13:24:55.588Z","slug":"CVE-2026-115726","body":"## Overview\n\nAider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=True after model replies or /editor use, running commands with the victim's privileges.\n\n## Affected\n\n- `aider <= 0.86.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}