{"data":{"id":"9c71f074-3891-40db-a0bc-b367cee92ee9","title":"CVE-2025-55012: Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve…","summary":"Prior to version 0.197.3 of Zed, a multiplayer code editor, the Zed Agent Panel let an AI agent bypass user permission checks. By exploiting this, an agent could create or modify a project-specific configuration file and execute arbitrary commands on a victim's machine without the explicit approval normally required, achieving Remote Code Execution (RCE).","solution":"Fixed in version 0.197.3. Workaround: avoid sending prompts to the Agent Panel, or limit the AI Agent's file system access.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-55012","publishedAt":"2025-08-11T22:15:27.843Z","cveId":"CVE-2025-55012","cweIds":["CWE-284","CWE-288"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["model_evasion","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Zed Agent Panel"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Zed Agent Panel allows remote code execution via permissions bypass","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00225,"epssCheckedAt":"2026-11-04T12:08:34.749Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T18:09:19.294Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}