A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc. Affected by this vulnerability is an unknown functionality of t…

A command injection vulnerability has been discovered in disler aider-mcp-server up to commit b2516fa. The flaw affects an unknown functionality in the server.py file of the aider_ai_code component. The vulnerability can be exploited remotely through manipulation of the relative_editable_files argument. An exploit has been published and is available for use. The project maintainers were notified early but have not responded yet. The product uses rolling releases making version tracking difficult.