Aider‑AI Aider 0.86.3 contains a flaw in the pre‑commit hook handler within aider/args.py. By manipulating the "git‑commit‑verify" argument, an attacker can subvert the intended protection mechanism, allowing unauthorized or malicious changes to be applied through Git commit operations. The vulnerability is classified as protection mechanism failure (CWE‑693) and does not directly grant code execution, but it threatens repository integrity and could facilitate tampering with code history.

The only product explicitly listed as vulnerable is the Aider‑AI Aider repository, version 0.86.3. No other versions or components are mentioned in the CVE data as affected.

The listed CVSS score of 5.3 represents moderate severity, and EPSS data is not available. The vulnerability is not in the CISA KEV catalog. Because the exploit is publicly available and the attack vector can be exercised remotely—likely via a crafted Git commit containing the malicious argument—an adversary need not have local access. The absence of a vendor patch at the time of reporting creates uncertainty about current mitigation, but the moderate severity and public exploitability suggest that the issue warrants immediate attention.