Security readout for executives and security teams
Plain-English summary
Aider 0.86.3 has a reported code injection flaw in Architect Mode. An authenticated remote attacker could manipulate behavior so code runs through auth.py's editor_coder.run path. Public exploit material is reported, but the bundle does not show confirmed real-world exploitation or a vendor fix.
Executive priority
Treat this as a near-term engineering risk for teams using Aider 0.86.3. The business urgency is moderate because exploit material is public, but confirmed active exploitation and vendor remediation are not shown in the provided evidence.
Technical view
The report maps to CWE-74/CWE-94 and CVSS 2.0 score 6.5 with network access, low complexity, and single authentication required. The affected component is Architect Mode, specifically editor_coder.run in auth.py. Sources state remote exploitation is possible and exploit material is public.
Likely exposure
Exposure appears limited to organizations running Aider 0.86.3, especially where Architect Mode is reachable by authenticated users or automation handling untrusted input. The sources do not identify other affected versions or hosted service exposure.
Exploitation context
VulDB reports a public exploit and remote exploitability, but KEV is false and the provided sources do not confirm active exploitation. Authentication is required according to the CVSS vector and CTI reference tags.
Researcher notes
Evidence is concentrated in VulDB and a GitHub issue reference. The record names Aider 0.86.3 only. Avoid expanding scope to other versions without vendor confirmation. Prioritize validating authenticated remote reachability, Architect Mode usage, and whether untrusted content can influence the affected path.
Mitigation direction
- Inventory Aider installations and identify any version 0.86.3 deployments.
- Restrict Architect Mode to trusted users and trusted project inputs only.
- Run Aider in least-privilege, isolated environments until guidance is available.
- Monitor Aider issue 5058 and vendor channels for a fixed release or workaround.
- Review VulDB updates before assuming any patch or mitigation exists.
Validation and detection
- Check package manifests, containers, and developer workstations for Aider 0.86.3.
- Confirm whether Architect Mode is enabled or used in automated workflows.
- Review access controls for any remotely reachable Aider usage.
- Look for local references to auth.py and editor_coder.run in deployed copies.
- Document whether remediation depends on unavailable vendor guidance.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-74: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCWE-94: Code execution behavior lookup
Code execution and unsafe deserialization weaknesses often justify reviewing execution behavior and process telemetry. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2026-10175 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.5 (2.0)
- Known Exploited
- No
- Published
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
4 official scoresWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR86.4VulDBCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R2.83.4VulDBCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R2.83.4VulDBCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P——VulDBVulnerability scoring details
Base CVSS 4.0 score
5.3MediumVector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Base CVSS 3.1 score
6.3MediumVector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
Base CVSS 3.0 score
6.3MediumVector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
Base CVSS 2.0 score
6.5MediumVector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- Source timelineVulDB
Advisory disclosed
- Source timelineVulDB
VulDB entry created
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- Source timelineVulDB
VulDB entry last update
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- VDB-367456 | Aider-AI Aider Architect Mode auth.py editor_coder.run code injectionCVE reference, VulDB · vdb-entry, technical-description
- VDB-367456 | CTI Indicators (IOB, IOC, TTP, IOA)CVE reference, VulDB · signature, permissions-required
- CVE-2026-10175 | CVE Analysis and ReportCVE reference, VulDB · third-party-advisory
- Submit #819909 | paul-gauthier aider 0.86.3 Code InjectionCVE reference, VulDB · third-party-advisory
- https://github.com/Aider-AI/aider/issues/5058CVE reference, VulDB · exploit, issue-tracking
- https://github.com/Aider-AI/aider/CVE reference, VulDB · product
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.
Improper Control of Generation of Code ('Code Injection')
Improper Control of Generation of Code ('Code Injection') represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.