zed-industries

Products

Exploited and recent CVEs

• CVE-2026-44466 High 8.6 Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions 0.3%
• CVE-2026-44463 High 8.6 Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions 0.2%
• CVE-2026-44462 Medium 6.4 Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions 0.4%
• CVE-2026-44465 High 8.6 Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config 0.3%
• CVE-2026-44461 High 8.6 Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote) 0.3%
• CVE-2026-27976 High 8.8 Zed Extension Sandbox Escape via Tar Symlink Following 0.7%
• CVE-2026-27967 High 7.1 Symlink Escape in Agent File Tools 0.3%
• CVE-2026-27800 High 7.4 Zed has Zip Slip Path Traversal in Extension Archive Extraction 0.4%
• CVE-2026-25805 Medium 6.4 Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning. 0.3%
• CVE-2025-68433 High 7.8 Zed IDE MCP Context Server Configuration Arbitrary Code Execution 0.3%
• CVE-2025-68432 High 7.8 Zed IDE LSP Binary Configuration Arbitrary Code Execution 0.3%
• CVE-2025-55012 High 8.5 Zed AI Agent Remote Code Execution 0.2%