CVE-2026-7316

A vulnerability has been found in eiliyaabedini aider-mcp up to 667b914301aada695aab0e46d1fb3a7d5e32c8af. Affected is an unknown function of the file aider_mcp.py of the component code_with_ai. The manipulation of the argument working_dir/editable_files leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-74
• CWE-77

• https://github.com/eiliyaabedini/aider-mcp/
• https://github.com/eiliyaabedini/aider-mcp/issues/1
• https://vuldb.com/submit/803082
• https://vuldb.com/vuln/359964
• https://vuldb.com/vuln/359964/cti

Published

Apr 28, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7315A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1…7.3
• CVE-2026-73155Affected versions of cti-transmute allow authenticated users…5.3
• CVE-2026-73156Affected versions of cti-transmute fail to HTML-escape attac…5.3
• CVE-2026-73157Affected versions of cti-transmute render data obtained from…2.3
• CVE-2026-73158Affected versions of cti-transmute insufficiently validate s…5.1
• CVE-2026-73159Affected versions of cti-transmute allow a tag's icon value …5.1
• CVE-2026-73160Affected versions of cti-transmute contain an SSRF vulnerabi…8.7
• CVE-2026-73161Affected versions of cti-transmute improperly handle convers…5.1
• CVE-2026-73162Affected versions of MISP cti-transmute expose several state…5.3
• CVE-2026-73163Nozomi Networks Labs identified a CWE-78: Improper Neutraliz…8.6
• CVE-2026-73164Nozomi Networks Labs identified a CWE-78: Improper Neutraliz…8.6
• CVE-2026-73165Nozomi Networks Labs identified a CWE-78: Improper Neutraliz…8.6