CVE-2026-10175 | Aider-AI Aider 0.86.3 Architect Mode auth.py editor_coder.run code injection (Issue 5058 / EUVD-2026-33495)

A vulnerability marked as critical has been reported in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editor_coder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection.

This vulnerability is known as CVE-2026-10175. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.