The vulnerability arises from the editor_coder.run function in Aider-AI Aider's Architect Mode, enabling an attacker to inject arbitrary code. This can lead to full compromise of the system where the Aider instance is running, allowing the attacker to execute commands, exfiltrate data, or take control of the environment. The weakness is classified as CWE-74 and CWE-94, indicating improper handling of input leading to code execution.

Aider-AI's Aider product, specifically version 0.86.3, is affected. Users running this version in Architect Mode are at risk. No other versions or components are listed as affected.

The CVSS score of 5.3 indicates a moderate risk, but remote exploitation is possible and an exploit package has been publicly released, making the threat real. EPSS data is unavailable, so the exact likelihood of exploitation cannot be quantified, and the vulnerability is not yet listed in the CISA KEV catalog. The attack vector is inferred from the description as remote, likely through network interfaces that expose Architect Mode. Since the project has not responded to early issue reports, a patch is not yet available, raising the severity of the ongoing threat.