This vulnerability involves command injection in the aider_ai_code component of disler's aider-mcp-server, caused by improper handling of the relative_editable_files argument in server.py. Remote attackers can exploit this flaw without authentication to execute arbitrary commands on the affected system. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity) with network attack vector, no privileges or user interaction required, and partial impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been published by the vendor as of the data provided.

Successful exploitation allows remote attackers to execute arbitrary commands on the server running aider-mcp-server, potentially compromising system integrity and confidentiality. The medium CVSS score reflects that while the attack is remotely executable without privileges or user interaction, the impact on system security is limited to partial loss of confidentiality, integrity, and availability. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider implementing network-level protections such as restricting access to the aider-mcp-server service and monitoring for suspicious activity related to the relative_editable_files parameter. Avoid exposing the service to untrusted networks until an official fix is available.