CVE-2026-27967
Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools ( , ).
Published Feb 26, 2026 · updated Jun 17, 2026 · zed zed
Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools ( , ). It allows reading and writing files **outside the project directory** when a project contains symbolic links pointing to external paths. This bypasses the intended workspace boundary and privacy protections ( , ), potentially leaking sensitive user data to the LLM. Version 0.225.9 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 26, 2026 · NIST NVD
Detected
Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools ( , ). It allows reading and writing files **outside the project directory** when a project contains symbolic links pointing to external paths. This bypasses the intended workspace boundary and privacy protections ( , ), potentially leaking sensitive user data to the LLM. Version 0.225.9 fixes t
Jun 17, 2026 · NIST NVD
Updated
Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools ( , ). It allows reading and writing files **outside the project directory** when a project contains symbolic links pointing to external paths. This bypasses the intended workspace boundary and privacy protections ( , ), potentially leaking sensitive user data to the LLM. Version 0.225.9 fixes t
Affected
- cpe zed/zedversion unspecified
Sources
- NIST NVDVulnerability recordCVE-2026-27967
Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools ( , ). It allows reading and writing files **outside the project directory** when a project contains symbolic links pointing to external paths. This bypass
nvd.nist.gov