zed-industries vulnerabilities

Products

• zed 12

Latest zed-industries CVEs

Newest publication first

1. CVE-2026-44466 Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions

   Published 2026-05-28

   High·CVSS 8.6 EPSS 0.28%

   Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowing execution of arbitrary commands nested inside an allowlisted command like echo. This vulnerability is fixed in 0.229.0.

2. CVE-2026-44463 Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions

   Published 2026-05-28

   High·CVSS 7.8 EPSS 0.23%

   Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior (e.g., PAGER) to execute arbitrary code. This vulnerability is fixed in 0.229.0.

3. CVE-2026-44462 Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions

   Published 2026-05-28

   High·CVSS 8.8 EPSS 0.44%

   Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution under an allowlisted command prefix. This vulnerability is fixed in 0.229.0.

4. CVE-2026-44465 Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config

   Published 2026-05-28

   High·CVSS 8.6 EPSS 0.30%

   Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution (RCE) when a victim open a folder...

5. CVE-2026-44461 Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)

   Published 2026-05-28

   High·CVSS 8.6 EPSS 0.26%

   Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment variable keys are inserted without shell quoting or validation. If an attacker can control an environment variable key (for example...

6. CVE-2026-27976 Zed Extension Sandbox Escape via Tar Symlink Following

   Published 2026-02-25

   High·CVSS 8.8 EPSS 0.69%

   Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor (async_tar::Archive::unpack) creates symlinks from the archive without validation, and the path guard (writeable_path_from_extension) only performs lexical prefix...

7. CVE-2026-27967 Symlink Escape in Agent File Tools

   Published 2026-02-25

   High·CVSS 7.1 EPSS 0.33%

   Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (read_file, edit_file). It allows reading and writing files outside the project directory when a project contains symbolic links pointing to external paths. This bypasses the i...

8. CVE-2026-27800 Zed has Zip Slip Path Traversal in Extension Archive Extraction

   Published 2026-02-25

   High·CVSS 7.4 EPSS 0.41%

   Zed, a code editor, has a Zip Slip (Path Traversal) vulnerability exists in its extension archive extraction functionality prior to version 0.224.4. The extract_zip() function in crates/util/src/archive.rs fails to validate ZIP entry filenames for path traversal sequences (e.g.,...

9. CVE-2026-25805 Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.

   Published 2026-02-10

   High·CVSS 8.0 EPSS 0.29%

   Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowance. Further it does not show after the tool was being invoked, which parameters were used. Thus, maybe unwanted or even malicious values cou...

10. CVE-2025-68433 Zed IDE MCP Context Server Configuration Arbitrary Code Execution

    Published 2025-12-17

    High·CVSS 7.3 EPSS 0.28%

    Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Model Context Protocol (MCP) configurations from the settings.json file located within a project’s .zed subdirectory. A malicious MCP configuration can contain ar...

11. CVE-2025-68432 Zed IDE LSP Binary Configuration Arbitrary Code Execution

    Published 2025-12-17

    High·CVSS 7.3 EPSS 0.28%

    Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Server Protocol (LSP) configurations from the settings.json file located within a project’s .zed subdirectory. A malicious LSP configuration can contain...

12. CVE-2025-55012 Zed AI Agent Remote Code Execution

    Published 2025-08-11

    High·CVSS 8.5 EPSS 0.24%

    Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution (RCE) by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.