CVE-2026-44463 Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions
Attackers can bypass terminal tool permissions in Zed by injecting environment variables into allowlisted commands, leading to arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-44463?
CVE-2026-44463 is a high-severity command injection vulnerability in zed-industries zed, published on 28 May 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior (e.g., PAGER) to execute arbitrary code. This vulnerability is fixed in 0.229.0.
Which versions are affected by CVE-2026-44463?
It affects 1 product.
Products include Zed Zed.
How do I fix CVE-2026-44463?
No fix has been published for CVE-2026-44463 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-44463 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-44463 exists.
Other vulnerabilities in zed-industries zed
- CVE-2026-27976 Zed Extension Sandbox Escape via Tar Symlink Following
- CVE-2026-44461 Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)
- CVE-2026-44465 Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config
- CVE-2026-44466 Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions
- CVE-2025-68432 Zed IDE LSP Binary Configuration Arbitrary Code Execution
Sources
Also known as GHSA-c3g6-c3ff-69cg, UBUNTU-CVE-2026-44463.