# Remove potential osascript hijacking attack \(\#2867\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/15f91f38f6212da3aba56d447cfe6d0c2bb1b525)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: 15f91f38f6212da3aba56d447cfe6d0c2bb1b525

Requested commit: 15f91f38f6212da3aba56d447cfe6d0c2bb1b525

Commit: 15f91f38f6212da3aba56d447cfe6d0c2bb1b525

Tree: 8f9284bba5134cc73fb7451c4401e6c81a5a44cc

Author: Mikayla Maki

Committer: GitHub

## Message

```
Remove potential osascript hijacking attack (#2867)

Fixes
https://linear.app/zed-industries/issue/Z-2818/security-vulnerability-dylib-injection

Release Notes:

- Fixed a potential local code-injection if a user installs the Zed CLI
for the first time with a hijacked `osascript` in their path.
```

## Parents

- [ef9686c9887364f5ebb7367d7efcec4c964222d8](https://git.cafe/gitcafe/zed/commit/ef9686c9887364f5ebb7367d7efcec4c964222d8?format=markdown)

- [5a356a47103fa5912fbe43853147583e28b6e44e](https://git.cafe/gitcafe/zed/commit/5a356a47103fa5912fbe43853147583e28b6e44e?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/15f91f38f6212da3aba56d447cfe6d0c2bb1b525?format=markdown)