This vulnerability involves command injection via the relative_editable_files argument in the aider_ai_code component of disler's aider-mcp-server, allowing remote code execution. The affected code is in src/aider_mcp_server/server.py. The product is distributed via a rolling release process, complicating version tracking. Although an exploit is publicly available, the vendor has not issued a patch or official remediation guidance. The CVSS 4.0 vector indicates the attack requires no privileges or user interaction but has low to limited impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected system, potentially compromising system integrity and confidentiality. The medium severity score reflects that while the attack is remotely exploitable without authentication, the impact on system security properties is limited to low or partial compromise. No known active exploitation in the wild has been reported to date.

No official patch or remediation guidance is currently available from the vendor. Users should monitor the vendor's communications for updates due to the rolling release model. Until a fix is provided, consider restricting network access to the aider-mcp-server component to trusted sources and applying general network-level controls to reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.