CyberRota Analysis
AI-GeneratedThe aider application is vulnerable due to its automatic loading of a configuration file from the root of the git repository, allowing an attacker to define commands that execute without user confirmation upon startup or file edits. This flaw enables arbitrary command execution on the user's machine, posing a significant security risk. Organizations using aider, particularly those that clone repositories from untrusted sources, should prioritize addressing this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit), which aider runs through a shell (subprocess with shell=True) without any user confirmation, LLM interaction, or API key. Consequently, a user who clones and runs aider inside an attacker-supplied repository achieves arbitrary command execution on their machine. The behavior is long-standing and was confirmed on 0.86.3.dev (current main).