← CVE Intelligence

CVE-2026-44465

Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config PUBLISHED

Description (CNA)

Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution (RCE) when a victim open a folder in untrusted mode. This vulnerability is fixed in 0.227.1.

Affected (CNA)

Vendor / productVersions
zed-industries / zedaffected < 0.227.1

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.