<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: zed</title><description>Every new CVE for zed.</description><link>https://agentprime.io/</link><item><title>CVE-2026-44466: Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions</title><link>https://agentprime.io/advisories/CVE-2026-44466/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44466/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 May 2026 16:16:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44463: Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions</title><link>https://agentprime.io/advisories/CVE-2026-44463/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44463/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 May 2026 16:15:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44462: Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions</title><link>https://agentprime.io/advisories/CVE-2026-44462/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44462/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 May 2026 16:13:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44465: Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config</title><link>https://agentprime.io/advisories/CVE-2026-44465/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44465/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 May 2026 16:10:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44461: Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)</title><link>https://agentprime.io/advisories/CVE-2026-44461/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44461/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 May 2026 16:08:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27976: Zed Extension Sandbox Escape via Tar Symlink Following</title><link>https://agentprime.io/advisories/CVE-2026-27976/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27976/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Feb 2026 23:34:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27967: Symlink Escape in Agent File Tools</title><link>https://agentprime.io/advisories/CVE-2026-27967/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27967/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Feb 2026 23:33:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27800: Zed has Zip Slip Path Traversal in Extension Archive Extraction</title><link>https://agentprime.io/advisories/CVE-2026-27800/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27800/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Feb 2026 23:25:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25805: Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.</title><link>https://agentprime.io/advisories/CVE-2026-25805/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25805/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Feb 2026 17:27:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68433: Zed IDE MCP Context Server Configuration Arbitrary Code Execution</title><link>https://agentprime.io/advisories/CVE-2025-68433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68433/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 22:47:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68432: Zed IDE LSP Binary Configuration Arbitrary Code Execution</title><link>https://agentprime.io/advisories/CVE-2025-68432/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68432/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 22:45:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-55012: Zed AI Agent Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2025-55012/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55012/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Aug 2025 21:25:40 GMT</pubDate><category>CVE</category></item></channel></rss>