Zhipu AI Apologizes After ZCode Uploads User Code Data

Users of Zhipu AI's ZCode assistant said the client uploaded full local development histories to third-party cloud servers without consent, including material that can contain secrets. Zhipu attributed the transfers to a default-on repository index feature, apologized on 18 September 2026, and said it would open-source ZCode for third-party review.

User reports

On 18 September 2026, Beijing time, multiple users of Zhipu AI's coding assistant ZCode said the client uploaded local programming data to third-party cloud servers without permission. The transfers were described as silent. Uploaded content included the full history of a development session, which can contain keys, secrets, and internal business information.

Users also said the upload could not be turned off in the client. The payload was encrypted, and users could not decrypt or unpack it on the machine or through the client.

The reports spread the same day. Users said they were concerned that private development assets had left their workstations.

Vendor response

Zhipu AI replied later on 18 September 2026. It said the transfers came from a feature named repository index (codebase index) that shipped turned on by default after launch. According to the company, uploaded data is used only to generate Repo Wiki pages in the cloud and is then destroyed, not retained.

Zhipu apologized to affected users. It said it would open-source the ZCode codebase, invite third-party review of the system, publish review progress, and grant every ZCode user one extra weekly quota reset.