High · published December 18, 2025
⚡ A crafty MCP configuration could let an attacker run commands on your system—just by opening a project in Zed! 🔥 Think of it like a trusted delivery service that accidentally delivers a ticking package containing a surprise inside—only instead of a bomb, it’s malicious code executing on your system without you even knowing it! 📦💥 If exploited, this vulnerability could allow an attacker to secretly run arbitrary commands with your user privileges, potentially leading to data loss, system compromise, or worse! Imagine the havoc they could wreak, like a mischievous gremlin messing with your files while you’re none the wiser.
Think of it like a trusted delivery service that accidentally delivers a ticking package containing a surprise inside—only instead of a bomb, it’s malicious code executing on your system without you even knowing it! 📦💥 This arbitrary code execution vulnerability in Zed allows attackers to load malicious MCP configurations from the `settings.json` file, executing shell commands on the host system without user interaction.
If exploited, this vulnerability could allow an attacker to secretly run arbitrary commands with your user privileges, potentially leading to data loss, system compromise, or worse! Imagine the havoc they could wreak, like a mischievous gremlin messing with your files while you’re none the wiser. Upgrade to version 0.218.2-pre immediately to patch this vulnerability. As a precaution, always review the contents of the `./zed/settings.json` file in any new projects before opening them in the Zed IDE. Stay vigilant! You've got this! With these steps, you’ll ensure your development environment remains safe and sound. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| zed/zed | < 0.218.2 | 0.218.2 |