@zcode_ai addressed community-reported product security issues by open-sourcing ZCode (github.com/zai-org/ZCode, Apache-2.0 — desktop/Web/Agent CLI) and shipping client v3.14.0 that removes Repo Wiki and the local-repo snapshot upload path. CAICT and NSFOCUS assessments confirm the zcode-prod Alibaba Cloud OSS bucket is zero-data and deleted; the team says referenced code data was not retained or used for training and will run an ongoing vuln-reporting reward process.

Key Takeaways

  • ✓Open-sourced github.com/zai-org/ZCode (Apache-2.0): desktop, Web, and Agent CLI/runtime.
  • ✓v3.14.0 removes Repo Wiki and local-repo snapshot generate/upload paths.
  • ✓CAICT/NSFOCUS confirm zcode-prod OSS zero-data and deleted; no retention/training use claimed; vuln rewards coming.
ADSponsored