CVE-2026-25805

概要

参考情報

• zed-industries/zed security advisory · Exploit

zed のその他の脆弱性

• CVE-2026-44466高 8.6Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowi…
• CVE-2026-44465高 8.6Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abu…
• CVE-2026-44463高 7.8Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments…
• CVE-2026-44462高 8.8Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}…
• CVE-2026-44461高 8.6Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but envi…