# CVE-2026-10177: Aider-AI Aider SSRF in URL scraping component

Source: https://junglewise.ai/threats/cve-2026-10177-aider-ai-aider-ssrf-in-url-scraping-component  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-31. Updated: 2026-07-07  
License: CC BY 4.0 with a link back

CVE-2026-10177 · Severity: medium · CVSS 6.3 · Published 2026-05-31

Aider, an AI-powered pair programming tool, is vulnerable to a security flaw where its built-in web scraping feature can be tricked into making requests to internal network addresses. If the tool is running in a cloud environment like AWS, an attacker could potentially use this to access sensitive internal metadata or security credentials. This could lead to unauthorized access to cloud resources or the exposure of private configuration data.

Technologies: [Aider-AI Aider](https://junglewise.ai/threats/technologies/aider). Vendors: [Aider-AI](https://junglewise.ai/threats/vendors/aider-ai), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-10177 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10177 being exploited in the wild.

**How severe is CVE-2026-10177?** Medium severity, with a CVSS score of 6.3, published 31 May 2026.

**Which products and versions are affected?** Aider-AI Aider 0.86.3; aider-chat (PyPI) <= 0.86.2, ECOSYSTEM:introduced=0,last_affected=0.86.2.

**Is there a fix for CVE-2026-10177?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-10177 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-10177?** Check whether you run Aider-AI Aider or aider-chat (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in Aider's built-in URL scraping path (specifically within aider/scrape.py). The application fails to implement guardrails against private IP addresses, loopback interfaces, or cloud metadata endpoints (such as 169.254.169.254). An attacker can provide a malicious URL in a repository file or prompt, causing Aider to fetch sensitive data like AWS EC2 IAM security credentials. The vulnerability is triggered when Aider attempts to scrape documentation or context from provided URLs. A pull request (#5137) has been submitted to implement hostname validation, redirect revalidation, and IP-level blocking to mitigate this issue.

## Affected products

- Aider-AI aider-chat <= 0.86.2

## Identifiers

- CVE-2026-10177
- GHSA-hchg-qm84-cj9p
- PYSEC-2026-2336

## Timeline

- 2026-04-26: disclosed: Issue first reported on GitHub
- 2026-05-16: other: Pull request with fix submitted
- 2026-05-31: advisory: GitHub Advisory and CVE published

## References

- [https://github.com/Aider-AI/aider/issues/5075](https://github.com/Aider-AI/aider/issues/5075)
- [https://github.com/Aider-AI/aider/pull/5137](https://github.com/Aider-AI/aider/pull/5137)
- [https://github.com/Aider-AI/aider](https://github.com/Aider-AI/aider)
- [https://vuldb.com/cve/CVE-2026-10177](https://vuldb.com/cve/CVE-2026-10177)
- [https://vuldb.com/submit/819911](https://vuldb.com/submit/819911)

## Related threats

- [Aider command execution via malicious config file](https://junglewise.ai/threats/cve-2026-115726-aider-through-0-86-2-contains-a-command-execution-vulnerability)
- [aider arbitrary command execution via .aider.conf.yml configuration file](https://junglewise.ai/threats/cve-2026-85674-aider-arbitrary-command-execution-via-aider-conf-yml)
- [Aider-AI Aider SQL injection in Code Generation Workflow](https://junglewise.ai/threats/cve-2026-10176-aider-ai-aider-sql-injection-in-code-generation-workflow)
- [Aider-AI Aider code injection in Architect Mode](https://junglewise.ai/threats/cve-2026-10175-aider-ai-aider-code-injection-in-architect-mode)
- [Aider-AI Aider protection mechanism failure in Pre-commit Hook Handler](https://junglewise.ai/threats/cve-2026-10174-aider-ai-aider-protection-mechanism-failure-in-pre-commit-hook)