Z.ai open-sources ZCode coding agent, sets bug bounty after security concerns
Zai_org · x · 2026-09-21
Responding to community-reported security issues, Z.ai has fixed ZCode, apologized, and open-sourced the coding agent harness on GitHub (1.2k stars) for community scrutiny.
Key points:
- A standing vulnerability reporting and response process with severity-based rewards
- The company confirms the questioned code data was never retained or used for model training
- Post-remediation reviews included China's CAICT
ZCode ships as a powerful, extensible coding agent harness with a CLI, remote harness, and agent skills.
More from coding & agent
- Photoroom reclaims ~1,000 idle GPU hours a week with SkyPilot across Slurm and Kubernetes — skypilot_org · 2026-11-12
- Indie Britpop AI music video built with Nano Banana Pro, Kling, and free lip-sync via WAN2GP + LTX 2.5 — cocktailpeanut · 2026-11-12
- Cloudflare Talk: Swapping Some Agent LLM Calls for Fast Models Like Jev Gives Big Speedups — michellechen · 2026-11-12
- Engineer Curates 15 AI Agent Design Patterns Across Single-Agent, Multi-Agent and Feedback Tiers — MaryamMiradi · 2026-11-12
- Google Antigravity rolls out browser use, closing the loop from research to coding to live verification — rseroter · 2026-11-12
- Prettier 3.10 ships new Flow/JS syntax and a Zig-powered Yuku plugin — Vjeux · 2026-11-12