PT-2026-7326 · Zed · Zed

M10X · Publicado 2026-02-10 · Atualizado 2026-02-10 · CVE-2026-25805

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zed versions prior to 0.219.4

Description Zed, a multiplayer code editor, does not display the parameters used when invoking a tool, both during the allowance request and after invocation. This lack of visibility could allow the use of unwanted or malicious values without the user’s knowledge. The issue concerns tool call details and the potential for tool poisoning.

Recommendations Update to version 0.219.4 or later to benefit from expandable tool call details.

Exploit

Correção

Enumeração de Fraquezas

CWE-356

Identificadores relacionados

CVE-2026-25805

GHSA-F2G4-87H6-4PXQ

Produtos afetados

Zed

Referências · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25805.json · Exploit
• https://github.com/zed-industries/zed/security/advisories/GHSA-f2g4-87h6-4pxq · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-25805 · Nota de Segurança
• https://t.me/CVEtracker/44314 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-25805 · Aviso do Fabricante