The vulnerability is a classic SQL injection flaw in the Code Generation Workflow of Aider-AI Aider version 0.86.3. By crafting a malicious payload through the workflow, an attacker can inject arbitrary SQL statements that the application will execute against its database. The impact includes unauthorized data access, manipulation of existing records, and potential denial of service if destructive queries are run. The description notes that the attack can be executed remotely and that a public exploit is available, indicating that no special access or privileged credentials are required to exploit the flaw.

Aider-AI’s Aider application, specifically the 0.86.3 release. No other versions or patches are listed as affected, so only this build is confirmed to contain the flaw.

With a CVSS score of 5.3, the risk is classified as moderate. While the EPSS score is not available, the fact that the exploit is publicly available and can be launched remotely means that an attacker can act without prior compromise. The flaw is not listed in CISA’s KEV catalog, but its remote nature and public exploit code increase the likelihood of real-world attacks. The overall risk is moderate to high in environments that expose the Code Generation Workflow to untrusted users.