CVE-2026-7157
Published: 27 April 2026
Summary
CVE-2026-7157 is a high-severity Injection (CWE-74) vulnerability. Its CVSS base score is 7.3 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 15.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Protocol-Specific Risks risk domain.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly mitigates command injection by requiring validation of inputs like the relative_editable_files argument to ensure they conform to expected formats before use in OS commands.
Ensures timely identification, reporting, and correction of the specific flaw in aider-mcp-server up to commit b2516fa466d0d851932da92ee6d0e66946db9efc, preventing exploitation of this CVE.
Limits the damage from injected commands by enforcing least privilege on processes handling the vulnerable relative_editable_files argument in server.py.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote command injection in public-facing server application directly enables T1190 (Exploit Public-Facing Application) for initial access and T1059 (Command and Scripting Interpreter) for arbitrary OS command execution.
NVD Description
A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc. Affected by this vulnerability is an unknown functionality of the file src/aider_mcp_server/server.py of the component aider_ai_code. This manipulation of the argument relative_editable_files causes command injection. Remote exploitation of the…
more
attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Deeper analysisAI
CVE-2026-7157 is a command injection vulnerability in the disler/aider-mcp-server project, affecting versions up to commit b2516fa466d0d851932da92ee6d0e66946db9efc. The flaw resides in an unknown functionality within the file src/aider_mcp_server/server.py of the aider_ai_code component, where manipulation of the relative_editable_files argument enables injection. This issue is classified under CWE-74 (Improper Neutralization of Special Elements used in an OS Command) and CWE-77 (Command Injection), with a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
The vulnerability allows remote attackers with no required privileges to exploit it over the network with low complexity. By crafting malicious input for the relative_editable_files argument, attackers can execute arbitrary commands on the server, potentially leading to limited impacts on confidentiality, integrity, and availability.
Advisories from VulDB and the project's GitHub issue #16 indicate that the vulnerability was reported early to the maintainers, but they have not yet responded. The project uses a rolling release model, so no specific patched versions are available. References include the repository at https://github.com/disler/aider-mcp-server/ and VulDB entries at https://vuldb.com/vuln/359756.
An exploit for this vulnerability has been publicly disclosed, increasing the risk of active exploitation.
Details
- CWE(s)
AI Security AnalysisAI
- AI Category
- AI Agent Protocols and Integrations
- Risk Domain
- Protocol-Specific Risks
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: mcp