CVE-2026-10176

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-10176

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10176.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-10176

Published

2026-05-31T09:00:13.581Z

Modified

2026-08-12T03:51:45.974060008Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Aider-AI Aider Code Generation Workflow sql injection

Details

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10176.json"
}

References

Affected packages

Git / github.com/aider-ai/aider

Affected ranges

Type

GIT

Repo

https://github.com/aider-ai/aider

Events

Introduced

7a1bd15f0c78160129c3b7ffc5ffc94bd992bbbe

Last affected

7a1bd15f0c78160129c3b7ffc5ffc94bd992bbbe

Database specific

Show details

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0.86.3"
        },
        {
            "last_affected": "0.86.3"
        }
    ]
}

Affected versions

0.*

0.86.3

v0.*

v0.86.3.dev

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10176.json"