Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-10176 A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a m… https://www.cve.org/CVERecord?id=CVE-2026-10176
Post summary
A weakness has been identified in Aider‑AI Aider 0.86.3’s Code Generation Workflow, but no further technical details, exploit code, or mitigation information are provided.
CVE-2026-10176 SQL Injection in Aider-AI Aider 0.86.3 Code Generation Workflow (Exploitation Reported) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10176
Post summary
The report confirms that CVE-2026-10176, an SQL injection in Aider-AI Aider 0.86.3, is being actively exploited, though no proof of concept or patch details are provided.