CVE-2026-27976
Zed, a code editor, has an extension installer allows tar/gzip downloads.
Published Feb 26, 2026 · updated Jun 17, 2026 · zed zed
Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor ( ) creates symlinks from the archive without validation, and the path guard ( ) only performs lexical prefix checks without resolving symlinks. An attacker can ship a tar that first creates a symlink inside the extension workdir pointing outside (e.g., ), then writes files through the symlink, causing writes to arbitrary host paths. This escapes the extension sandbox and enables code execution. Version 0.224.4 patches the issue.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 26, 2026 · NIST NVD
Detected
Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor ( ) creates symlinks from the archive without validation, and the path guard ( ) only performs lexical prefix checks without resolving symlinks. An attacker can ship a tar that first creates a symlink inside the extension workdir pointing outside (e.g., ), then writes files through
Jun 17, 2026 · NIST NVD
Updated
Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor ( ) creates symlinks from the archive without validation, and the path guard ( ) only performs lexical prefix checks without resolving symlinks. An attacker can ship a tar that first creates a symlink inside the extension workdir pointing outside (e.g., ), then writes files through
Affected
- cpe zed/zedversion unspecified
Sources
- NIST NVDVulnerability recordCVE-2026-27976
Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor ( ) creates symlinks from the archive without validation, and the path guard ( ) only performs lexical pr
nvd.nist.gov