CVE-2026-27967

The record

Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (`read_file`, `edit_file`). It allows reading and writing files **outside the project directory** when a project contains symbolic links pointing to external paths. This bypasses the intended workspace boundary and privacy protections (`file_scan_exclusions`, `private_files`), potentially leaking sensitive user data to the LLM. Version 0.225.9 fixes the issue.

Affected packages

Related vulnerabilities

• CVE-2026-113724 virtualenv is a tool for creating isolated virtual python environments. CWE-59
• CVE-2026-113716 virtualenv is a tool for creating isolated virtual python environments. CWE-59
• CVE-2026-55480 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-59
• CVE-2026-90954 A flaw was found in BusyBox's dpkg-deb archive extraction. CWE-59
• CVE-2026-109274 ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race… CWE-59
• CVE-2026-105081 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for… CWE-59
• CVE-2026-108119 A flaw was found in busybox. CWE-59
• CVE-2026-12345 The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. CWE-59