CVE-2026-44465 – zed
“Public exploit code against a developer editor can turn trusted coding workflows into command execution risk.”
zed-industries released patches for four high-severity vulnerabilities affecting zed. CVE-2026-44461 has a CVSS score of 8.6, which is High severity. CVE-2026-44463 has a CVSS score of 8.6, which is High severity. CVE-2026-44465 has a CVSS score of 8.6, which is High severity. CVE-2026-44466 has a CVSS score of 8.6, which is High severity.
The vulnerabilities involve command injection weaknesses that could allow remote code execution in affected zed environments. Public proof-of-concept code is available for all four issues. The updates strengthen command handling and input validation protections to reduce exposure across developer workstations.
Key Details
- Affected Product
- Zed Zed
- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-78