Hub/AI Security/Zed
Zed
Zed Industries · Official site
5 Yes0 Partial0 No5 Unknown
| Feature | Status | Notes | Source | Checked |
|---|---|---|---|---|
| Tool-call approval prompts | Yes | Tool actions confirm by default (always-allow defaults to off) | Source | 2026-11-04 |
| Per-tool allow / deny | Yes | Per-tool rules incl. mcp:<server>:<tool> | Source | 2026-11-04 |
| Sandboxing | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| OAuth for remote MCP | Yes | Standard MCP OAuth flow | Source | 2026-11-04 |
| Verified marketplace listings | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Auto-install / auto-update control | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Admin allowlists | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Audit logs | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Data retention / training opt-out | Yes | No prompt / code retention by default; no-training commitments | Source | 2026-11-04 |
| Security disclosure page | Yes | 12 GHSAs published on zed-industries/zed | Source | 2026-11-04 |
Advisories (12)
Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions
Zed · CVE-2026-44462 · GHSA-rqq3-p6x4-q866
Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config
Zed · CVE-2026-44465 · GHSA-fj2r-rmw6-h222
Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions
Zed · CVE-2026-44466 · GHSA-c99f-97vf-4h5h
Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions
Zed · CVE-2026-44463 · GHSA-c3g6-c3ff-69cg
Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote) in Zed v0.225.9
Zed · CVE-2026-44461 · GHSA-63qj-jc2q-7hg5
Zip Slip Path Traversal in Extension Archive Extraction
Zed · CVE-2026-27800 · GHSA-v385-xh3h-rrfr
Parameter Values are not shown for MCP Tool Calls. Users cannot detect tool poisoning.
Zed · CVE-2026-25805 · GHSA-f2g4-87h6-4pxq
Zed IDE MCP Context Server Configuration Arbitrary Code Execution
Zed · CVE-2025-68433 · GHSA-cv6g-cmxc-vw8j
Zed IDE LSP Binary Configuration Arbitrary Code Execution
Zed · CVE-2025-68432 · GHSA-29cp-2hmh-hcxj
Across the hub
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.