https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:24:33.813850+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44463 CVE-2026-44463 — Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions 2026-10-08T06:24:33.815097+00:00

Affected: zed-industries zed

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior (e.g., PAGER) to execute arbitrary code. This vulnerability is fixed in 0.229.0.