CVE-2025-68432 Zed IDE LSP Binary Configuration Arbitrary Code Execution
Attackers can execute arbitrary code by tricking users into opening projects with malicious LSP configurations in the Zed IDE.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-68432?
CVE-2025-68432 is a high-severity command injection vulnerability in zed-industries zed, published on 17 Dec 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Server Protocol (LSP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious LSP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered when a user opens project file for which there is an LSP entry. A concerted effort by an attacker to seed a project settings file (`./zed/settings.json`) with malicious language server configurations could result in arbitrary code execution with the user's privileges if the user opens the project in Zed without reviewing the contents. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.
Weakness: CWE-77
Which versions are affected by CVE-2025-68432?
It affects 1 product.
Products include Zed Zed.
How do I fix CVE-2025-68432?
No fix has been published for CVE-2025-68432 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2025-68432 being exploited?
There is no known exploitation of CVE-2025-68432 in the wild and no public exploit code.
Other vulnerabilities in zed-industries zed
- CVE-2026-27976 Zed Extension Sandbox Escape via Tar Symlink Following
- CVE-2026-44461 Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)
- CVE-2026-44463 Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions
- CVE-2026-44465 Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config
- CVE-2026-44466 Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions
Sources
Also known as GHSA-29cp-2hmh-hcxj.