CVE-2026-25805

Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.

State: Published
Severity: 6.4 Medium
Published: Feb 10, 2026
Updated: Feb 10, 2026
Reserved: Feb 5, 2026

Description

Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowance. Further it does not show after the tool was being invoked, which parameters were used. Thus, maybe unwanted or even malicious values could be used without the user having a chance to notice it. Patched in Zed Editor 0.219.4 which includes expandable tool call details.

Scores

CVSS	Score	Vector	Source
3.1	6.4 Medium	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-356 Product UI does not Warn User of Unsafe Actions

Affected Products

Product	Versions
zedzed-industries	< 0.219.4Affected

References

https://github.com/zed-industries/zed/security/advisories/GHSA-f2g4-87h6-4pxq

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.