CVE-2026-10174

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-10174

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10174.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-10174

Published

2026-05-31T08:00:11.079Z

Modified

2026-08-12T03:51:10.413587835Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Aider-AI Aider Pre-commit Hook args.py protection mechanism

Details

A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Such manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cwe_ids": [
        "CWE-693"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10174.json"
}

References

Affected packages

Git / github.com/aider-ai/aider

Affected ranges

Type

GIT

Repo

https://github.com/aider-ai/aider

Events

Introduced

7a1bd15f0c78160129c3b7ffc5ffc94bd992bbbe

Last affected

7a1bd15f0c78160129c3b7ffc5ffc94bd992bbbe

Database specific

Show details

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0.86.3"
        },
        {
            "last_affected": "0.86.3"
        }
    ]
}

Affected versions

0.*

0.86.3

v0.*

v0.86.3.dev

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10174.json"