@zcode_ai addressed community-reported product security issues by open-sourcing ZCode (github.com/zai-org/ZCode, Apache-2.0 — desktop/Web/Agent CLI) and shipping client v3.14.0 that removes Repo Wiki and the local-repo snapshot upload path. CAICT and NSFOCUS assessments confirm the zcode-prod Alibaba Cloud OSS bucket is zero-data and deleted; the team says referenced code data was not retained or used for training and will run an ongoing vuln-reporting reward process.

Key Takeaways

  • ✓Open-sourced github.com/zai-org/ZCode (Apache-2.0): desktop, Web, and Agent CLI/runtime.
  • ✓v3.14.0 removes Repo Wiki and local-repo snapshot generate/upload paths.
  • ✓CAICT/NSFOCUS confirm zcode-prod OSS zero-data and deleted; no retention/training use claimed; vuln rewards coming.
Zhipu open-sources ZCode and ships v3.14.0 after repo-snapshot security fix; CAICT/NSFOCUS confirm OSS emptied
🖼️Official Media
Click to view high-res
🧭

Turn your technical choice into a development budget

Compare 40 dev plans & simulate token costs vs $20/mo subscriptions

Action HubReady to adopt this in production?

Benchmark side-by-side against alternatives, or calculate monthly token cost vs subscription break-even.

Up NextZhipu: GLM Coding Plan raises Flash quotas — unlimited in ZCode daytime, 2× in other agents
Read Now→