Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Zed Extension Sandbox Escape via Tar Symlink Following
Vulnerability Description
Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor (`async_tar::Archive::unpack`) creates symlinks from the archive without validation, and the path guard (`writeable_path_from_extension`) only performs lexical prefix checks without resolving symlinks. An attacker can ship a tar that first creates a symlink inside the extension workdir pointing outside (e.g., `escape -> /`), then writes files through the symlink, causing writes to arbitrary host paths. This escapes the extension sandbox and enables code execution. Version 0.224.4 patches the issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
CWE-61
Vulnerability Title
Zed 安全漏洞
Vulnerability Description
Zed是Zed Industries开源的一个代码编辑器。 Zed 0.224.4之前版本存在安全漏洞，该漏洞源于tar提取器创建符号链接时未经验证，可能导致代码执行。
CVSS Information
N/A
Vulnerability Type
N/A