LiveActive security incident?Get immediate response
CVE Record

CVE-2026-10174: Aider-AI Aider Pre-commit Hook args.py protection mechanism

A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Such manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

MediumCVSS 6.5Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

Aider 0.86.3 has a reported bypass in its pre-commit hook handling. The issue may let a remote, authenticated attacker weaken a protection mechanism tied to git commit verification. Public proof-of-concept material is reported, but the provided sources do not show confirmed active exploitation or a vendor fix.

Executive priority

Treat this as a moderate developer-tool supply-chain risk. Prioritize teams that use Aider in CI or protected repository workflows, because the issue concerns a control bypass rather than direct system compromise. Do not assume a patch exists from the provided sources.

Technical view

CVE-2026-10174 affects an unknown function in aider/args.py within the Pre-commit Hook Handler. Manipulation of the git-commit-verify argument is reported to cause CWE-693 protection mechanism failure. VulDB scores it CVSS 2.0 6.5 with network access, low complexity, and single authentication required.

Likely exposure

Exposure appears limited to environments using Aider-AI Aider 0.86.3, especially developer workstations or automation relying on Aider’s pre-commit hook behavior. The sources do not identify other affected versions or downstream products.

Exploitation context

The bundle reports a public exploit and says it might be used. KEV is false, and the cited sources do not confirm active exploitation. The CVSS vector indicates remote access with authentication required, so this should be treated as credible but not yet proven in the wild.

Researcher notes

Evidence is incomplete. The report names args.py and git-commit-verify but not the exact vulnerable function. Vendor response is reported as absent. Avoid extrapolating impact beyond Aider 0.86.3 until the CVE record, VulDB entry, or upstream issue adds details.

Mitigation direction

  • Inventory developer and CI environments for Aider 0.86.3.
  • Monitor Aider issue 5057 and vendor releases for an official fix.
  • Upgrade when the vendor publishes a patched version.
  • Do not rely solely on Aider pre-commit behavior for policy enforcement.
  • Use independent CI checks for commit and repository protections.

Validation and detection

  • Check package manifests and installed tools for Aider 0.86.3.
  • Review CI and developer workflows for Aider pre-commit hook usage.
  • Confirm whether git-commit-verify behavior is security-relevant in your workflow.
  • Track VulDB and the GitHub issue for updated affected-version and fix details.
Prepared
Confidence
medium
Sources
8

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cwe · low confidence lookup

CWE-693: Exact CWE lookup

Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2026-10174 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Medium
CVSS
6.5 (2.0)
Known Exploited
No
Published

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

4CVSS vectors
6Timeline events
0ADP providers
7Source links

CVSS vector scores

4 official scores

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
6.5CVSS 2.0MediumAV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR86.4VulDB
6.3CVSS 3.1MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R2.83.4VulDB
6.3CVSS 3.0MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R2.83.4VulDB
5.3CVSS 4.0MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P——VulDB

Vulnerability scoring details

Base CVSS 4.0 score

5.3Medium
CVSS 4.0 vector shape for CVE-2026-10174Attack VectorAttack ComplexityAttack RequirementsPrivileges RequiredUser InteractionVS ConfidentialityVS IntegrityVS AvailabilitySS ConfidentialitySS IntegritySS Availability

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Attack Requirements
NonePresent
Privileges Required
NoneLowHigh
User Interaction
NonePassiveActive
VS Confidentiality
HighLowNone
VS Integrity
HighLowNone
VS Availability
HighLowNone
SS Confidentiality
HighLowNone
SS Integrity
HighLowNone
SS Availability
HighLowNone

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. Source timelineVulDB

    Advisory disclosed

  2. Source timelineVulDB

    VulDB entry created

  3. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  4. Source timelineVulDB

    VulDB entry last update

  5. CVE publishedCVE Program

    The CVE record was published.

  6. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
Aider-AIAider0.86.3Listed
Weakness

CWE details

CWE-693

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.

CWE-693 · source CWE mapping

Protection Mechanism Failure

Protection Mechanism Failure represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.

Open CWE intelligenceSame-CWE CVEs