CVE-2026-25805 Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.
Zed editor fails to display MCP tool call parameters, preventing users from detecting malicious tool poisoning during execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-25805?
CVE-2026-25805 is a medium-severity vulnerability in zed-industries zed, published on 10 Feb 2026. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowance. Further it does not show after the tool was being invoked, which parameters were used. Thus, maybe unwanted or even malicious values could be used without the user having a chance to notice it. Patched in Zed Editor 0.219.4 which includes expandable tool call details.
Weakness: CWE-356
Which versions are affected by CVE-2026-25805?
It affects 1 product.
Products include Zed Zed.
How do I fix CVE-2026-25805?
No fix has been published for CVE-2026-25805 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-25805 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-25805 exists.
Other vulnerabilities in zed-industries zed
- CVE-2026-27976 Zed Extension Sandbox Escape via Tar Symlink Following
- CVE-2026-44461 Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)
- CVE-2026-44463 Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions
- CVE-2026-44465 Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config
- CVE-2026-44466 Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions
Sources
Also known as GHSA-f2g4-87h6-4pxq.