Zhipu AI has officially open-sourced its ZCode programming tool following community reports regarding security concerns. The company published the source code on GitHub to ensure transparency and community oversight.
The company confirmed that the issue originated from the 'Codebase Index' feature, which was enabled by default. This feature was intended to support session checkpoint recovery and the Repo Wiki function, but it inadvertently triggered data uploads during the Wiki generation process.
Zhipu AI stated that all uploaded data has been deleted and was never utilized for model training. The company has officially apologized to its users and implemented a permanent product security vulnerability reporting mechanism to reward developers for future feedback.
Independent audits conducted by the China Academy of Information and Communications Technology and NSFOCUS confirmed that the Alibaba Cloud OSS storage bucket is empty. The ZCode v3.14.0 client has been updated to remove the Repo Wiki function and disable all local repository snapshot upload paths.
