Zhipu open-sources ZCode after security remediation, with CAICT and NSFOCUS assessments confirming data deletion
ResearchCrafty1804 · reddit · 2026-09-21
Zhipu has open-sourced ZCode (github.com/zai-org/ZCode)—including the desktop app, web workspace, backend, Agent CLI, and runtime—and apologized for product security issues reported by the community.
Key points from the official announcement: confirmed the referenced code data was never retained nor used for model training; CAICT verified the zcode-prod Alibaba Cloud OSS bucket is in a zero-data state, and v3.14.0 removed the Repo Wiki feature and disabled local repo snapshot generation/upload; NSFOCUS confirmed all data objects and the bucket itself were deleted, with no remaining path to transmit local files externally. Zhipu will set up an ongoing vulnerability reporting process with severity-based rewards; the full assessment report is coming soon.
More from coding & agent
- User automates entire video clipping workflow with Nous Research's Hermes agent — Teknium · 2026-11-12
- As models improve, writing good evals gets harder and more important — amankhan · 2026-11-12
- Prime agent ships with day-one multi-agent communication, runs in Minecraft unmodified — sarahcat21 · 2026-11-12
- Autonomous agent edits just 1,024 weights to lift Qwen3.5 0.8B from 7.4% to 37.4% on MATH-500 — VictorSanh · 2026-11-12
- Omarchy 4.6 lets you share local AI models across your tailnet, says DHH — alexcovo_eth · 2026-11-12
- Coding harnesses hand shell access to inference providers — 4-step gateway mitigation — shensi · 2026-11-12