Shanghai-based AI developer Z.ai, which builds large language models and related tools, patched ZCode after developers reported on September 17 that the coding assistant had uploaded local workspace data to external servers without explicit user consent.

Independent blogger Ferstar said a 313-megabyte compressed file linked to his commercial project was queued for upload to Alibaba Group Holding’s cloud storage service after repeated failed attempts.

He also said a 15-kilobyte file had been uploaded successfully. Visible filenames showed project data and Git history, he said.

Z.ai, also known as Zhipu AI, apologised for the incident.

Developers said the episode could undermine trust in Z.ai as cybersecurity becomes a bigger issue across the AI industry.

🔗 Source: South China Morning Post

Recent Z.ai developments