CVE-2026-44463

creationtimestamp| type| source ---|---|--- 2026-05-28 20:08:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwt7frvk42e 2026-05-28 21:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww6msug72z 2026-06-03 02:37:05+00:00| seen|...

PT-2026-39598

Name of the Vulnerable Software and Affected Versions Zed versions prior to 0.229.0 Description The terminal tool permission system in the Zed code editor can be bypassed using bash variable expansion chaining $var@P. This allows for arbitrary command execution when an allowlisted command prefix ...

PT-2026-39599

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior e.g., PAGER to execute arbitrary code. This vulnerability is fixed in 0.229.0...