The vulnerability resides in the requests.get call used by the AWS EC2 Metadata Endpoint module within the api_docs.py file of Aider‑AI Aider. An attacker who can influence the target URL argument can cause the application server to issue arbitrary HTTPS or HTTP requests to arbitrary destinations. This can expose internal resources, retrieve sensitive metadata, or potentially trigger further malicious actions on downstream services. The weakness is classified as CWE‑918 and delivers a moderate severity impact, compromising the confidentiality and integrity of data reachable from the application server but does not enable direct execution of code within the host.

Aider‑AI Aider version 0.86.3 is affected. No broader version range is specified, so the vulnerability is believed to exist in this specific release only. Only systems running this version of the open‑source project are at risk.

With a CVSS score of 5.3 the risk is considered moderate. No EPSS score is available, and the vulnerability is not included in the CISA KEV catalog. The attack vector is remote, requiring the attacker to supply the target URL to the vulnerable function. Successful exploitation would depend on the ability to send such a request from the environment where the application is running. Once exploitation is achieved, the attacker can exfiltrate data or interact with internal services that otherwise remain unreachable from the outside. The lack of authentication requirements and the public disclosure suggest a real threat that should be mitigated before further exploitation occurs.