Zhipu open-sources ZCode after security fixes and two external audits

Zhipu open-sources ZCode after security fixes and two external audits

N
News Editor
2026-09-21 01:36:33
Zhipu said on Sept. 21 that it has officially open-sourced ZCode after completing remediation tied to product security issues previously raised by the community. The company said it opened the codebase for public oversight after finishing the fixes. According to Zhipu, ZCode v3.14.0 removed the Repo Wiki feature and cut off the pathway for generating and uploading local repository snapshots. After the remediation work, the company invited the China Academy of Information and Communications Technology and NSFOCUS to conduct security audits. Zhipu said both institutions confirmed that related cloud-side data had been cleared, and that the new client version did not contain a functional path that could trigger local repository snapshots or external file transmission. Addressing earlier concerns around code data, Zhipu said again that the relevant code data had "not been retained and has never been used for model training." The company also said ZCode will set up a standing security vulnerability feedback mechanism and provide rewards to developers based on issue severity.

According to BlockBeats, Zhipu officially open-sourced ZCode on Sept. 21.

Zhipu said it has completed remediation work in response to product security issues previously raised by the community, and has released the code for community oversight. The company said ZCode v3.14.0 removed the Repo Wiki feature and cut off the pathway for generating and uploading local repository snapshots.

After the remediation was completed, Zhipu said it invited the China Academy of Information and Communications Technology and NSFOCUS to carry out security audits. The company said both institutions confirmed that related cloud data had been cleared, and that the new client version did not contain a functional path that could trigger local repository snapshots or external file transmission.

On the code data issue that had drawn community attention, Zhipu said again that the relevant code data had "not been retained and has never been used for model training." The company added that ZCode will establish a regular security vulnerability feedback mechanism and offer rewards to developers based on the severity of reported issues.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
2210

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.