This vulnerability involves command injection via manipulation of the working_dir/editable_files argument in an unknown function of aider_mcp.py in the aider-mcp project. The attack vector is remote with no required privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating medium severity. The project has been notified but has not yet responded or provided a remediation. Due to the rolling release model, version-specific details are unavailable.

Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary commands on the affected system with the privileges of the application. This can lead to compromise of system integrity and potential further attacks depending on the environment. However, no active exploitation in the wild has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or released a fix, users should monitor the official repository or communication channels for updates. Until a fix is available, avoid exposing the vulnerable component to untrusted inputs or networks if possible.