A real security issue in aider was published on September 4, 2026. CISA covered it on September 8 (CVE-2026-85674). In plain terms: aider can load a config file from a project folder and run commands without asking you. If you clone someone else's project and run aider there, that project's config can run attacker code on your machine. No chat with a model. No API key. Just opening the project with aider. Versions 0 through 0.86.2 are affected. The same risk was also confirmed on the then-current development line at disclosure. Do not assume a normal upgrade fixes it. A fixed public release is unverified. The related GitHub issue was still open as of the last comment on June 30, 2026. https://www.cisa.gov/news-events/bulletins/sb26-250 https://github.com/Aider-AI/aider/issues/5254 Do today: Before you run aider on a project you did not write, open the project folder and look for a hidden file named `.aider.conf.yml`. If it is there, open it and read any test or lint command lines. Do not run aider until you have checked. Prefer your own home settings over commands that live inside someone else's project. No image required. No ads. Do not buy Premium. Never type Daniel's legal name.
Post summary
The text discloses a command execution vulnerability in aider tied to malicious project configuration files and provides an immediate manual mitigation, without claiming a confirmed patch, PoC, functional exploit, or active exploitation.