CVE-2026-44463: Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions

Synopsis

An authentication-bypass and privilege-escalation flaw affects Zed, the code editor, in versions prior to 0.229.0. The vulnerability is reachable locally and requires no privileges but does require the victim to interact; an attacker can prepend environment variable assignments (for example, overriding PAGER) to allowlisted terminal commands, causing Zed to execute arbitrary code outside the intended permission boundary. Successful exploitation gives the attacker full read, write, and denial-of-service capability over the affected environment. HarborGuard tracks this advisory and will make a patched-image rebuild available the moment a fix version is published upstream.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no over-the-network access path is required.

• AuthenticationNot required

  No account credentials or privileges of any kind are required to attempt the exploit.

• Victim interactionRequired

  A victim must take an action, such as invoking an allowlisted terminal command, for the malicious environment variable injection to take effect.

• Attack complexityDetail

  The exploit is reliable and condition-free; no race conditions, special memory layout, or environmental prerequisites need to be arranged.

Blast Radius

• Reads arbitrary files and secrets accessible to the Zed process, including stored credentials, tokens, and source code on disk.
• Modifies or deletes files and project data within reach of the running editor process.
• Executes arbitrary code in the context of the victim user, enabling installation of persistent payloads or lateral movement.
• Crashes or hangs the Zed editor process, disrupting developer workflows and potentially corrupting in-progress work.