CVE-2026-7157

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7157", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-26T20:11:09.027Z", "datePublished": "2026-04-27T20:45:13.983Z", "dateUpdated": "2026-04-29T14:01:20.148Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-27T20:45:13.983Z"}, "title": "disler aider-mcp-server aider_ai_code server.py command injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-77", "lang": "en", "description": "Command Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-74", "lang": "en", "description": "Injection"}]}], "affected": [{"vendor": "disler", "product": "aider-mcp-server", "versions": [{"version": "b2516fa466d0d851932da92ee6d0e66946db9efc", "status": "affected"}], "modules": ["aider_ai_code"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc. Affected by this vulnerability is an unknown functionality of the file src/aider_mcp_server/server.py of the component aider_ai_code. This manipulation of the argument relative_editable_files causes command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-04-26T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-26T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-26T22:16:14.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "SmallW (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/359756", "name": "VDB-359756 | disler aider-mcp-server aider_ai_code server.py command injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359756/cti", "name": "VDB-359756 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/802061", "name": "Submit #802061 | disler aider-mcp-server 0.1.0 Command Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/disler/aider-mcp-server/issues/16", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/disler/aider-mcp-server/", "tags": ["product"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-29T14:00:37.946560Z", "id": "CVE-2026-7157", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-29T14:01:20.148Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7157", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-29T14:00:37.946560Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-29T14:01:15.708Z"}}], "cna": {"title": "disler aider-mcp-server aider_ai_code server.py command injection", "credits": [{"lang": "en", "type": "reporter", "value": "SmallW (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "disler", "modules": ["aider_ai_code"], "product": "aider-mcp-server", "versions": [{"status": "affected", "version": "b2516fa466d0d851932da92ee6d0e66946db9efc"}]}], "timeline": [{"lang": "en", "time": "2026-04-26T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-26T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-26T22:16:14.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/359756", "name": "VDB-359756 | disler aider-mcp-server aider_ai_code server.py command injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359756/cti", "name": "VDB-359756 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/802061", "name": "Submit #802061 | disler aider-mcp-server 0.1.0 Command Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/disler/aider-mcp-server/issues/16", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/disler/aider-mcp-server/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc. Affected by this vulnerability is an unknown functionality of the file src/aider_mcp_server/server.py of the component aider_ai_code. This manipulation of the argument relative_editable_files causes command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "Command Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-27T20:45:13.983Z"}}}, "cveMetadata": {"cveId": "CVE-2026-7157", "state": "PUBLISHED", "dateUpdated": "2026-04-29T14:01:20.148Z", "dateReserved": "2026-04-26T20:11:09.027Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-27T20:45:13.983Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["aider_ai_code"], "product": "aider-mcp-server", "vendor": "disler", "versions": [{"status": "affected", "version": "b2516fa466d0d851932da92ee6d0e66946db9efc"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc. Affected by this vulnerability is an unknown functionality of the file src/aider_mcp_server/server.py of the component aider_ai_code. This manipulation of the argument relative_editable_files causes command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."}, {"lang": "es", "value": "Se ha encontrado una falla en disler aider-mcp-server hasta b2516fa466d0d851932da92ee6d0e66946db9efc. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo src/aider_mcp_server/server.py del componente aider_ai_code. Esta manipulaci\u00f3n del argumento relative_editable_files causa inyecci\u00f3n de comandos. La explotaci\u00f3n remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado. Este producto sigue un enfoque de lanzamiento continuo para la entrega continua, por lo que los detalles de la versi\u00f3n para las versiones afectadas o actualizadas no se proporcionan. Se inform\u00f3 al proyecto del problema tempranamente a trav\u00e9s de un informe de incidencias, pero a\u00fan no ha respondido."}], "id": "CVE-2026-7157", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7157", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-29T14:00:37.946560Z", "version": "2.0.3"}}]}, "published": "2026-04-27T21:16:44.167", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/disler/aider-mcp-server/"}, {"source": "cna@vuldb.com", "url": "https://github.com/disler/aider-mcp-server/issues/16"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/802061"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359756"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359756/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}, {"lang": "en", "value": "CWE-77"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "b2516fa466d0d851932da92ee6d0e66946db9efc"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "aider-mcp-server", "source": "cna", "vendor": "disler"}, "product": "aider-mcp-server", "vendor": "disler"}], "analysis": {"en": {"generated_at": "2026-04-28T19:39:50.898034+00:00", "value": {"mitigation_remediation": ["Check for and install the latest release of aider-mcp-server that contains the fix for the command injection issue.", "If a new release is not yet available, restrict or disable the API endpoint that processes the relative_editable_files parameter to limit exposure.", "Implement server\u2011side input validation or sanitization for the relative_editable_files argument to prevent arbitrary command execution.", "Contact the maintainer to request an urgent fix or guidance for interim hardening of the application."], "summary": {"action": "Patch immediately", "impact": "Remote Command Execution"}, "threat_synthesis": {"affected_systems": "This issue affects instances of the Disler aider-mcp-server product built from source code up to and including the commit b2516fa466d0d851932da92ee6d0e66946db9efc. The project follows a rolling\u2011release model, so any deployment built from an unpatched commit is vulnerable until a new release that removes the flaw is published.", "description_and_impact": "The vulnerability is a command injection flaw in the aide_ai_code server.py module of the aider-mcp-server application. An attacker can supply a specially crafted relative_editable_files argument that causes the server to execute arbitrary shell commands. This flaw allows remote exploitation without authentication and has an available exploit published publicly. If exploited, an attacker could gain full control over the host running the service, compromise confidentiality, integrity, and availability, and use the system to pivot to other assets.", "risk_and_exploitability": "The CVSS score of 6.9 classifies the risk as medium, but the availability of a public exploit and the absence of a hardening barrier raise the practical threat. EPSS is 1%, indicating a low but non\u2011zero exploit probability, and the vulnerability is not listed in CISA's KEV catalogue. Based on the description, the likely attack vector is a remote HTTP endpoint that accepts user input in the relative_editable_files parameter. An attacker can remotely trigger the injection by sending a crafted request, regardless of authentication, making this a high\u2011impact vulnerability for exposed services."}}}}, "created": "2026-04-28T09:16:55.051866+00:00", "title": "Command Injection via relative_editable_files in aider-mcp-server", "updated": "2026-04-28T19:45:07.606161+00:00", "vendors": ["disler", "disler$PRODUCT$aider-mcp-server"]}