CVE-2025-55012

Zed AI Agent Remote Code Execution

State: Published
Severity: 8.5 High
Published: Aug 11, 2025
Updated: Aug 12, 2025
Reserved: Aug 4, 2025

Description

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution (RCE) by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific configuration file, leading to the execution of arbitrary commands on a victim's machine without the explicit approval that would otherwise be required. This vulnerability has been patched in version 0.197.3. A workaround for this issue involves either avoid sending prompts to the Agent Panel, or to limit the AI Agent's file system access.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	GitHub_M

Weaknesses

CWE-288 Authentication Bypass Using an Alternate Path or Channel
CWE-284 Improper Access Control

Affected Products

Product	Versions
zedzed-industries	< 0.197.3Affected

References

https://github.com/zed-industries/zed/security/advisories/GHSA-x34m-39xw-g2wr

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.