AI编码
www.aibase.com ·
智谱AI回应ZCode代码上传争议：已修复漏洞，将开源代码库
智谱AI旗下代码助手ZCode因“代码仓库索引”功能引发用户代码数据上传争议。官方发布声明致歉，说明该功能原用于生成本地代码仓库索引，支持会话断点恢复、历史版本回滚和Repo Wiki等能力；生成Repo Wiki页面时会上传仓库数据，云端生成Wiki后相关数据立即销毁且不保留。争议主因是该功能上线时默认开启，部分用户在未充分了解的情况下触发数据上传。相关漏洞已修复，ZCode计划近期开源代码库并邀请第三方评估机构独立审查，持续公布审查进展，同时为所有ZCode用户额外重置一周配额。该事件凸显AI编程工具在代码数据处理、默认设置与隐私透明度方面面临的信任挑战。
AI推荐理由 智谱AI就ZCode代码助手默认开启的代码仓库索引功能引发的用户代码上传争议作出回应，披露了事件原因（功能默认开启、用户未充分理解即触发上传）、数据在云端生成Wiki后立即销毁不保留的处理方式，以及修复漏洞、计划开源代码库、邀请第三方独立评估并持续公布审查进展、为所有用户额外重置一周配额等补救措施。该事件对AI编程工具在代码数据处理、默认设置与隐私透明度方面具有参考价值，但信息来自AIbase转述，非官方原文，具体技术细节与开源时间表未提供。
72
正文
Zhipu AI Responds to the Controversy Over ZCode Code Upload: Vulnerability Fixed and Code Repository to Be Open-Sourced
AIbase基地
Published inAI News · 2 min read · Sep 20, 2026
9
ZCode, the code assistant under Zhipu AI, recently sparked controversy over user code data upload due to its "code repository indexing" feature. ZCode officially released a statement and apologized, disclosing the reasons for the incident and the remediation plan.
Officially, the feature was originally used to generate local code repository indexes, supporting session breakpoint recovery, historical version rollback, and Repo Wiki, among other capabilities. When generating the Repo Wiki page, the repository data would be uploaded; after the Wiki was generated in the cloud, the relevant data would be immediately destroyed and not retained.
The main reason for the controversy was that the feature was enabled by default at launch, and some users triggered the data upload without fully understanding it. The related vulnerability has been fixed. To rebuild developer trust, ZCode plans to open-source the code soon and invite third-party assessors for independent review, continuously publishing the progress of the review. In addition, the official has provided all ZCode users with an additional weekly quota reset, and the relevant quota was issued on the day the statement was released.
This incident also highlights the trust challenges faced by AI programming tools in terms of code data processing, default settings, and privacy transparency.
ZCodeCodeRepositoryIndexAIProgrammingToolPrivacyTransparency
This article is from AIbase Daily
Scan to view
Welcome to the [AI Daily] column! This is your daily guide to exploring the world of artificial intelligence. Every day, we present you with hot topics in the AI field, focusing on developers, helping you understand technical trends, and learning about innovative AI product applications.
—— Created by the AIbase Daily Team
© Copyright AIbase Base 2024, Click to View Source -