CVE-2026-115726: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Aider-AI aider

CVE-2026-115726 describes an OS command injection vulnerability in Aider-AI's aider software versions up to and including 0.86.2. The vulnerability is triggered when an attacker commits a crafted .aider.conf.yml file containing malicious commands in the notifications-command or editor fields. These commands are executed by the application using subprocess with shell=True, without a trust prompt, allowing arbitrary shell command execution with the victim's privileges. This occurs after model replies or when the /editor feature is used.

Successful exploitation allows an attacker to execute arbitrary shell commands on the victim's system with the same privileges as the user running the aider application. This can lead to unauthorized system access, data compromise, or further system manipulation. The CVSS 4.0 score of 8.5 reflects high severity due to local attack vector, low attack complexity, no privileges required, but requiring user interaction.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid committing untrusted .aider.conf.yml files and exercise caution when using the notifications-command or editor features. Monitoring for suspicious configuration changes is advised.