https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:59:19.378437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44462 CVE-2026-44462 — Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions 2026-10-07T00:59:19.380222+00:00

Affected: zed-industries zed

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution under an allowlisted command prefix. This vulnerability is fixed in 0.229.0.