Unverified50% confidenceFactExact time
Zed v1.17.1-pre fixes a potential filesystem sandbox escape vulnerability (#63144) that could allow extensions to access the host filesystem beyond their authorized scope.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/11/2026
First Seen
Valid until: 12/10/2026
Sources
Related Entities
Related Claims
UnverifiedHistorical RouterOS vulnerabilities include CVE-2018-14847, a Winbox protocol vulnerability (allowing unauthorized users to read arbitrary files), and CVE-2019-3976, an SMB stack overflow (enabling remote code execution).64% similarUnverifiedThe update patched multiple bypass vulnerabilities in Bash Read() denial rules, including cases where sensitive files were passed as option values, appeared in git diff/git grep operands, or were bypassed through compound commands like cd DIR && cat FILE.64% similarUnverifiedKnown paths for sandbox escape include technical means such as exploiting container runtime vulnerabilities (e.g., runc CVE-2024-21626) and breaking through Linux namespace isolation.63% similarUnverifiedThe CVE-2024-21626 vulnerability exploited a file descriptor leak in runc when handling working directories to achieve container escape, and emerged in early 2024.60% similarVerifiedCVE-2021-44228 is the well-known Log4Shell vulnerability60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/898782API
curl https://kongchang.com/api/v1/knowledge/claims/898782MCP
get_claim(id=898782)