Zhipu's ZCode open-sources code and launches bug bounty after security backlash
TheZachMueller · x · 2026-09-21
Responding to community-reported security issues, the ZCode team issued a public apology, said fixes are complete, and open-sourced the code for community scrutiny. It committed to an ongoing vulnerability reporting and response process with severity-based rewards.
A Zhipu-affiliated account followed up saying the team proactively engaged ZCode after seeing community concern, that the flagged issues are fixed, an independent review is underway, and future improvements will be visible in the open — framing transparency as the way to rebuild trust in GLM's ecosystem.
More from Companies & People
- Cloudflare Trains Its Own Clef and Clairic Models to Complete Its Agent Stack — michellechen · 2026-11-12
- Cloudflare Becomes a 'Neolab' With JEV, Training Clef and Clairic on Its Own Inference — michellechen · 2026-11-12
- Anthropic Told Sell Side AI Is Winner-Take-All, SpaceX Deal Ends Mid-2027 — ns123abc · 2026-11-12
- Board drama may have been the fatal blow to OpenAI, argues commentator — teortaxesTex · 2026-11-12
- OpenAI's five biggest failures laid out: pretraining decline, alignment fears, enterprise lost to Claude — teortaxesTex · 2026-11-12
- Engineer Event Highlights Shift to Always-On Background AI Workloads — reneeshah123 · 2026-11-12