CVE-2026-44462

Published: May 28, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution under an allowlisted command prefix. This vulnerability is fixed in 0.229.0.

Affected (1)

Products: Zed: Zed

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zed Zed	Before 0.229.0

Related CWEs

Incomplete List of Disallowed Inputs

The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete, leading to resultant weaknesses.

References (1)

https://github.com/zed-industries/zed/security/advisories/GHSA-rqq3-p6x4-q866

Source: security-advisories@github.com

ExploitVendor Advisory

Timeline

No history available yet.