Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. It is suggested to install a patch to address this issue. The pull request to fix this issue awaits acceptance.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-10177 A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Metadata … https://www.cve.org/CVERecord?id=CVE-2026-10177
Post summary
This entry announces CVE-2026-10177, a newly discovered vulnerability in Aider-AI Aider 0.86.3 that targets a specific requests.get call within the AWS EC2 Metadata component.
CVE-2026-10177 Server-Side Request Forgery in Aider-AI Aider 0.86.3 AWS EC2 Metadata Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10177
Post summary
CVE‑2026‑10177 is a disclosed SSRF vulnerability in Aider‑AI Aider 0.86.3 affecting the AWS EC2 metadata endpoint, with the text providing only the basic vulnerability information.