Zhipu AI has issued an apology regarding its ZCode programming tool following community reports about unauthorized code repository data uploads. The company confirmed that the issue was identified and patched immediately after an internal investigation.
The technical root of the problem was the repository indexing feature, which was designed to assist users with session checkpoint recovery, version rollbacks, and the creation of Repo Wiki knowledge bases. The Wiki generation process inadvertently triggered data uploads to the cloud.
The company clarified that data uploaded during the Wiki generation process was destroyed immediately after use and not stored. The feature was enabled by default upon its initial release, which led to the incident affecting a portion of the user base.
To address security concerns and restore user trust, Zhipu AI plans to open-source the ZCode repository. The company will also invite third-party auditors to review the system and provide regular updates on the progress of these security assessments.
As a gesture of goodwill, all ZCode users will receive a one-time reset of their weekly usage quota, effective from September 18.
