EUVD-2026-32940CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowing execution of arbitrary commands nested inside an allowlisted command like echo. This vulnerability is fixed in 0.229.0.
AnalysisAI
Command injection in Zed code editor versions prior to 0.229.0 allows bypass of the terminal tool's permission allowlist through bash arithmetic expansion syntax $((...)) nested inside permitted commands like echo. Because Zed is increasingly used with AI agent workflows that execute shell commands on behalf of the user, the bypass effectively neutralizes the safety boundary intended to gate dangerous operations. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Audit systems running Zed versions prior to 0.229.0, with priority on those integrated with AI agent tools or automated shell execution workflows. Within 7 days: Disable the Zed terminal tool via configuration settings organization-wide, or prohibit Zed for AI automation workflows until patch availability is confirmed. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today