CVE-2026-115726 Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings

The AI coding tool Aider (versions through 0.86.2) is vulnerable to command execution via the repository-level .aider.conf.yml file. The root cause is the automatic loading of this configuration file without a trust prompt. Attackers who can commit a malicious .aider.conf.yml can set notification...