CVE-2026-27967highCWE-59

CVE-2026-27967: falha de alta gravidade em zed-industries zed

Symlink Escape in Agent File Tools

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar zed

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.3%
Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (`read_file`, `edit_file`). It allows reading and writing files **outside the project directory** when a project contains symbolic links pointing to external paths. This bypasses the intended workspace boundary and privacy protections (`file_scan_exclusions`, `private_files`), potentially leaking sensitive user data to the LLM. Version 0.225.9 fixes the issue.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Produtos afetados
zed-industries · zed
CVEs relacionadas — zed-industries zed

No mesmo produto, das mais perigosas para as menos.

CVE-2026-27976HIGHZed Extension Sandbox Escape via Tar Symlink FollowingEPSS 0.7%CVE-2026-44462MEDIUMZed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool PermissionsEPSS 0.4%CVE-2026-27800HIGHZed has Zip Slip Path Traversal in Extension Archive ExtractionEPSS 0.4%CVE-2026-44465HIGHZed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/configEPSS 0.3%CVE-2026-25805MEDIUMZed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.EPSS 0.3%CVE-2025-68433HIGHZed IDE MCP Context Server Configuration Arbitrary Code ExecutionEPSS 0.3%