Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-10177

Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery

Description

A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. It is suggested to install a patch to address this issue. The pull request to fix this issue awaits acceptance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Aider-AI Aider

  • 0.86.3affected

References