CVE-2026-44463

Mô tả

Tham khảo

• zed-industries/zed security advisory · Exploit

Lỗ hổng khác của zed

• CVE-2026-44466CAO 8.6Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowi…
• CVE-2026-44465CAO 8.6Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abu…
• CVE-2026-44462CAO 8.8Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}…
• CVE-2026-44461CAO 8.6Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but envi…
• CVE-2026-27976CAO 8.8Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor (`async_tar::Archive::…