Archive — CN — technode
Zhipu says ZCode removed repository-upload paths after data controversy
Zhipu has addressed concerns regarding its ZCode AI tool's ability to upload user data without consent by removing certain repository-upload features. The updated version 3.14.0 eliminates the RepoWiki feature and associated upload paths. Though audits cleared the alleged data risks, full access reports remain undisclosed.
Key points
- Zhipu faced user concerns about ZCode's data upload capabilities.
- A security overhaul resulted in the removal of RepoWiki and upload paths in version 3.14.0.
- Audits by the China Academy confirmed no data was found in the Alibaba Cloud OSS bucket.
- NSFOCUS verified that the bucket and objects were deleted.
- Zhipu claims the data was not utilized for model training, but audit details remain undisclosed.
Why it matters
- Privacy concerns in AI tools have been a recurring issue, highlighting the need for stronger data governance.
- The incident reflects broader discussions in 2025 about software transparency and user consent.
- Current trends emphasize the importance of secure coding practices and open-source transparency.
Zhipu's actions reflect an important response to user privacy concerns and set a precedent for AI tool accountability amid growing scrutiny over data practices.