CVE-2026-44466

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowing execution of arbitrary commands nested inside an allowlisted command like echo. This vulnerability is fixed in 0.229.0.

• CWE-78

• https://github.com/zed-industries/zed/security/advisories/GHSA-c99f-97vf-4h5hExploit, Vendor Advisory
• https://github.com/zed-industries/zed/security/advisories/GHSA-c99f-97vf-4h5hExploit, Vendor Advisory

Published

May 28, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4446Use after free in WebRTC in Google Chrome prior to 146.0.768…8.8
• CVE-2026-44460FileRise is a self-hosted web-based file manager with multi-…7.4
• CVE-2026-44461Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL r…8.6
• CVE-2026-44462Zed is a code editor. Prior to 0.229.0, Zed's terminal tool …8.8
• CVE-2026-44463Zed is a code editor. Prior to 0.229.0, Zed's terminal tool …7.8
• CVE-2026-44465Zed is a code editor. Prior to 0.227.1, Zed IDE executes arb…8.6
• CVE-2026-44467The Claude Desktop app gives you Claude Code with a graphica…6.8
• CVE-2026-44468The affected product creates a directory with insecure defau…8.5
• CVE-2026-44469The affected product extracts installation files to a tempor…7
• CVE-2026-4447Inappropriate implementation in V8 in Google Chrome prior to…8.8
• CVE-2026-44470The Claude Desktop app gives you Claude Code with a graphica…7.8
• CVE-2026-44471gitoxide is an implementation of git written in Rust. Prior …7.8