Service update · Zhipu

ZCode open-sourced on GitHub with third-party security audit results

Event date

Sep 21, 2026 08:45 Mon · Beijing Time (UTC+8)

Review updated

Sep 21, 2026 09:19 Mon · Beijing Time (UTC+8)

ZCode WeChat post 2026-09-21 08:45: after security concerns, remediation complete and apology issued; client open-sourced at https://github.com/zai-org/ZCode with an ongoing bug bounty. States user code is not stored and was never used for training. CAICT and Sangfor audits confirm Alibaba Cloud OSS bucket zcode-prod empty/deleted; ZCode v3.14.0 removes Repo Wiki and cuts local-repo snapshot upload paths. Delivers the Sep 18 open-source + third-party audit pledge.