Z.ai open-sources ZCode after coding assistant uploaded local repos

Beijing-based Z.ai (also known as Zhipu) said it disabled some features of its ZCode AI coding assistant and open-sourced the product after developers reported the tool uploaded entire local code repositories — including Git histories — to overseas cloud servers without consent. Reuters reported the company’s Monday statements; the ZCode repo is public on GitHub under zai-org.

SAFETY desk — when a coding agent can silently ship your private repo to the cloud, trust in AI developer tools becomes a product feature, not a blog post.

Beijing-based Z.ai, also known as Zhipu, apologized after Chinese developers wrote last week that ZCode had uploaded their code data from Git to Alibaba Cloud. Z.ai referred Reuters to its public statements when asked for further comment.

In a Friday statement, Reuters says, Z.ai said the issue originated from ZCode’s “Codebase Indexing” feature, which was enabled by default, and that it had patched the software vulnerability. Codebase Indexing here means a feature that catalogs local files so the assistant can search them.

On Monday, Z.ai said it had open-sourced the coding assistant — the company said it runs its latest GLM-5.3 AI model — and disabled certain features, pledging to make the product more transparent. In a separate Monday post on its official ZCode X account, the company said it would establish an ongoing product-security vulnerability reporting and response process, and welcomed developers to keep reviewing ZCode and reporting potential issues. Open-source here means publishing the source code so others can inspect it.

The open-sourced harness is public on GitHub as zai-org/ZCode. A harness is the software that runs the coding agent. Z.ai’s product site calls ZCode the official harness for GLM-5.3. TechNode, citing IT Home, says the repository describes ZCode as an AI coding workbench with desktop, browser, and terminal-agent components.

Users had said the uploaded data was encrypted with a backend private key held only by Z.ai, so they could not open their own uploaded files or independently confirm deletion. Developers also wrote, Reuters says, that there was no toggle to disable the feature and no prior acknowledgement in Z.ai’s privacy policy.

Chengming Technology said on social media on Friday that six of its company coding workspaces were uploaded onto the cloud without consent, including complete source code, database passwords, and employees’ personal information. On Monday, Reuters says, Chengming retracted that statement, saying it had “wrong evidence.”.

Z.ai said an independent security assessment by the Chinese industry ministry’s affiliated IT standards think tank and Chinese cybersecurity firm NSFOCUS found that users’ code data had been deleted and was not retained by the cloud platform. The company said it had enabled a zero-data retention feature on the coding assistant used by developers and tech enterprises, and that the full security assessment report would be released soon.

TechNode reported the same day that Zhipu also said its MaaS platform — model-as-a-service, meaning model access over the internet — will soon let users apply for non-retention of data content. For standard model calls, the company says, inputs and outputs will not be statically stored and will only be used for the current request. TechNode notes the policy does not cover every API path: Batch API and File API data, plus information kept for legal, security, or abuse-prevention reasons, may still be retained for a defined period.

Context only, keep brief: Reuters notes China’s cyber regulator released an updated AI safety framework last week. Reuters also notes Z.ai delayed GLM-5.3 earlier for a two-week safety review. Reuters and the company describe a default-on product feature and a consent failure. This desk has no evidence of a state-directed theft.

Plain English for the rest of the card: Z.ai / Zhipu = the Beijing AI lab that makes ZCode and GLM models. ZCode = its AI coding assistant. repo / repository = a code project folder. Git history = the saved change log of that project. Codebase Indexing = a default-on feature that catalogs local files so the assistant can search them. harness = the software that runs the coding agent. open-source = publishing the source code so others can inspect it. MaaS = model-as-a-service — model access over the internet. zero-data retention = the company’s claim that it will not keep the request after it finishes. This filing is the Monday disable-and-open-source remediation via Reuters, plus the public GitHub repo. It is not a confirmed census of victim companies and not an espionage charge.