Zed code editor contains a vulnerability in versions prior to 0.229.0 where the terminal tool permission system can be bypassed. Attackers can prepend environment variable assignments to allowlisted commands to hijack program behavior. The vulnerability allows execution of arbitrary code by manipulating environment variables like PAGER. This represents a significant security flaw that could allow unauthorized code execution in the development environment. The issue has been fixed in version 0.229.0.