Z.ai open-sources ZCode coding agent after security complaints, launches third-party review
teortaxesTex · x · 2026-09-21
Z.ai has open-sourced its ZCode coding agent harness (zai-org/ZCode on GitHub, 1.1k stars) after community-reported security issues, apologizing for the concern caused.
- The team says it investigated and remediated the reported issues in collaboration with the ZCode team
- Independent security reviews by third-party firms are underway, with findings to be shared publicly
- An ongoing vulnerability reporting and response process is being established, with severity-based bounties for developers
The repo includes a CLI, remote harness, agent skills, and design docs.
More from coding & agent
- Indie Britpop AI music video built with Nano Banana Pro, Kling, and free lip-sync via WAN2GP + LTX 2.5 — cocktailpeanut · 2026-11-12
- Cloudflare Talk: Swapping Some Agent LLM Calls for Fast Models Like Jev Gives Big Speedups — michellechen · 2026-11-12
- Engineer Curates 15 AI Agent Design Patterns Across Single-Agent, Multi-Agent and Feedback Tiers — MaryamMiradi · 2026-11-12
- Google Antigravity rolls out browser use, closing the loop from research to coding to live verification — rseroter · 2026-11-12
- Prettier 3.10 ships new Flow/JS syntax and a Zig-powered Yuku plugin — Vjeux · 2026-11-12
- YC-backed Graphide claims CI runner 10-20x faster than GitHub on 24 repos — ycombinator · 2026-11-12