Home

Description

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution under an allowlisted command prefix. This vulnerability is fixed in 0.229.0.

PUBLISHED Reserved 2026-05-06 | Published 2026-05-28 | Updated 2026-05-29 | Assigner GitHub_M




MEDIUM: 6.4CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L

Problem types

CWE-184: Incomplete List of Disallowed Inputs

Product status

< 0.229.0
affected

References

github.com/...es/zed/security/advisories/GHSA-rqq3-p6x4-q866

cve.org (CVE-2026-44462)

nvd.nist.gov (CVE-2026-44462)

Download JSON