Zed
Zed Industries · Everything the hub tracks about Zed: MCP Clients, IDE Integrations, AI Security.
MCP Clients
Zed
Yes: Tools, Prompts, OAuth sign-in, Local (stdio), Remote (HTTP/SSE)
2 of 10 unknown
Full mcp detail →IDE Integrations
Zed
Yes: Inline completion, Agent mode, MCP, BYO model / key, Local models, Zed
6 of 12 unknown
Full ides detail →AI Security
Zed
Yes: Tool-call approval prompts, Per-tool allow / deny, OAuth for remote MCP, Data retention / training opt-out, Security disclosure page
5 of 10 unknown
Full security detail →Security advisories (12)
1 critical · 9 high · 2 mediumAllowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions
Zed · CVE-2026-44462 · GHSA-rqq3-p6x4-q866
Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config
Zed · CVE-2026-44465 · GHSA-fj2r-rmw6-h222
Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions
Zed · CVE-2026-44466 · GHSA-c99f-97vf-4h5h
Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions
Zed · CVE-2026-44463 · GHSA-c3g6-c3ff-69cg
Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote) in Zed v0.225.9
Zed · CVE-2026-44461 · GHSA-63qj-jc2q-7hg5
Zip Slip Path Traversal in Extension Archive Extraction
Zed · CVE-2026-27800 · GHSA-v385-xh3h-rrfr
Parameter Values are not shown for MCP Tool Calls. Users cannot detect tool poisoning.
Zed · CVE-2026-25805 · GHSA-f2g4-87h6-4pxq
Zed IDE MCP Context Server Configuration Arbitrary Code Execution
Zed · CVE-2025-68433 · GHSA-cv6g-cmxc-vw8j
Zed IDE LSP Binary Configuration Arbitrary Code Execution
Zed · CVE-2025-68432 · GHSA-29cp-2hmh-hcxj
Other tools
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.