Zed 1.16.2, released August 24, 2026, closes a filesystem sandbox escape in the editor's extension installer — a flaw that could have allowed a malicious extension to write files to arbitrary ...