CVE-2025-68432

Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Server Protocol LSP configurations from the "settings.json" file located within a project’s ".zed" subdirectory. A malicious LSP configuration can contain arbitrary shell...