CVE-2026-44463

概要

参考情報

• zed-industries/zed security advisory · Exploit

zed のその他の脆弱性

• CVE-2026-44466高 8.6Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowi…
• CVE-2026-44465高 8.6Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abu…
• CVE-2026-44462高 8.8Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}…
• CVE-2026-44461高 8.6Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but envi…
• CVE-2026-27976高 8.8Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor (`async_tar::Archive::…