Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonit…

A critical vulnerability in Zed code editor prior to version 0.227.1 allows remote code execution through malicious .git/config files. The vulnerability abuses the core.fsmonitor Git configuration option to execute arbitrary commands when a victim opens a folder in untrusted mode. This represents a significant security risk for developers using the Zed IDE. The vulnerability has been patched in version 0.227.1. Users should update immediately to prevent potential exploitation.