Zed code editor contains a vulnerability in versions prior to 0.229.0 where the terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands. This allows attackers to hijack program behavior through environment variables like PAGER to execute arbitrary code. The vulnerability represents a privilege escalation attack vector that bypasses security controls. The issue has been fixed in version 0.229.0.