CVE-2026-7157
Published: 27 April 2026
Summary
CVE-2026-7157 is a medium-severity Injection (CWE-74) vulnerability. Its CVSS base score is 5.5 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 15.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Protocol-Specific Risks risk domain.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
A command injection vulnerability tracked as CVE-2026-7157 affects disler aider-mcp-server up to commit b2516fa466d0d851932da92ee6d0e66946db9efc. The flaw resides in an unspecified function within src/aider_mcp_server/server.py of the aider_ai_code component and is triggered by improper handling of the relative_editable_files argument. It is classified under CWE-74 and CWE-77, carries a CVSS 4.0 score of 5.5, and impacts a project that follows a rolling-release model with no discrete version identifiers supplied for affected builds.
Remote attackers can exploit the issue without authentication or user interaction by supplying crafted input to the relative_editable_files parameter, resulting in arbitrary command execution. Successful exploitation yields limited effects on confidentiality, integrity, and availability. Publicly available exploit code has been released, and the vendor was notified via an issue report but has not issued a response or patch.
Advisories hosted on VulDB and the project repository note the absence of coordinated remediation and provide no mitigation guidance beyond the original disclosure. The associated EPSS score has remained essentially flat, moving only from 0.0212 to a peak of 0.0218.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-25924
Vulnerability details
A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc. Affected by this vulnerability is an unknown functionality of the file src/aider_mcp_server/server.py of the component aider_ai_code. This manipulation of the argument relative_editable_files causes command injection. Remote exploitation of the…
more
attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
- CWE(s)
AI Security AnalysisAI
- AI Category
- AI Agent Protocols and Integrations
- Risk Domain
- Protocol-Specific Risks
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: mcp
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote command injection in public-facing server application directly enables T1190 (Exploit Public-Facing Application) for initial access and T1059 (Command and Scripting Interpreter) for arbitrary OS command execution.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates command injection by requiring validation of inputs like the relative_editable_files argument to ensure they conform to expected formats before use in OS commands.
Ensures timely identification, reporting, and correction of the specific flaw in aider-mcp-server up to commit b2516fa466d0d851932da92ee6d0e66946db9efc, preventing exploitation of this CVE.
Limits the damage from injected commands by enforcing least privilege on processes handling the vulnerable relative_editable_files argument in server.py.