CVE-2026-27967 PUBLISHED

Symlink Escape in Agent File Tools

Assigner: GitHub_M
Reserved: 25.02.2026 Published: 25.02.2026 Updated: 25.02.2026

Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (read_file, edit_file). It allows reading and writing files outside the project directory when a project contains symbolic links pointing to external paths. This bypasses the intended workspace boundary and privacy protections (file_scan_exclusions, private_files), potentially leaking sensitive user data to the LLM. Version 0.225.9 fixes the issue.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS Score: 7.1

Product Status

Vendor zed-industries
Product zed
Versions
  • Version < 0.225.9 is affected

References

Problem Types

  • CWE-59: Improper Link Resolution Before File Access ('Link Following') CWE