PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-44462 zed-industries CVE debrief

A command injection vulnerability in Zed's terminal tool permission system allows bypass of allowlist restrictions via Bash parameter expansion chaining. The flaw exists in versions prior to 0.229.0 and permits arbitrary command execution when an attacker supplies specially crafted input using `${var@P}` syntax to a terminal tool configured with an allowlisted command prefix. The CVSS 3.1 score of 6.4 reflects network attack vector, high attack complexity, no required privileges, required user interaction, and unchanged scope with high confidentiality impact and low integrity/availability impact. The vulnerability was disclosed via GitHub Security Advisory and is currently undergoing analysis in NVD. No known exploitation in ransomware campaigns has been reported.

Vendor
zed-industries
Product
zed
CVSS
MEDIUM 6.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-28
Original CVE updated
2026-05-28
Advisory published
2026-05-28
Advisory updated
2026-05-28

Who should care

Organizations and developers using Zed's AI-assisted terminal tool feature with custom allowlist configurations; security teams evaluating supply chain risks in development tools; Zed users in multi-tenant or untrusted workspace environments

Technical summary

The Zed code editor's terminal tool feature implements a permission system based on command prefix allowlisting. Prior to version 0.229.0, this mechanism fails to account for Bash parameter expansion operators, specifically the `${parameter@P}` expansion which expands the parameter as if it were a prompt string. An attacker can chain this expansion to inject arbitrary commands despite the allowlist restriction. For example, if `/usr/bin/git` is allowlisted, an attacker could craft input that uses variable expansion to execute unintended commands. The vulnerability requires user interaction (accepting a terminal tool suggestion) and high attack complexity due to the need for specific configuration and social engineering. The fix in 0.229.0 addresses the parsing logic to properly handle or reject dangerous expansion patterns in terminal tool arguments.

Defensive priority

medium

Recommended defensive actions

  • Upgrade Zed to version 0.229.0 or later to remediate the terminal tool permission bypass vulnerability
  • Review terminal tool configurations for allowlisted command prefixes that may be susceptible to parameter expansion attacks
  • Audit terminal tool usage logs for suspicious `${var@P}` or similar bash expansion patterns
  • Implement additional input validation for terminal tool arguments beyond prefix matching
  • Consider disabling terminal tool functionality for untrusted workspaces until patching is complete

Evidence notes

Vulnerability description sourced from NVD record and GitHub Security Advisory GHSA-rqq3-p6x4-q866. CWE-184 (Incomplete List of Disallowed Inputs) identified as primary weakness. Fix version 0.229.0 confirmed in advisory.

Official resources

2026-05-28