Z.AI's code assistant product, ZCode, recently found itself at the center of a user data upload controversy, sparking widespread discussion among developers.

In its latest official statement, ZCode apologized to affected users and disclosed both the cause of the incident and the corrective measures being taken. According to the company, the issue stems from the "Codebase Index" feature, which was designed to generate repository indexes locally to support development aids such as session resume, version rollback, and Repo Wiki.

However, during the generation of Repo Wiki pages, the feature triggers the upload of repository data. The company emphasized that once the Wiki pages are generated on the cloud, the uploaded data is immediately destroyed and not retained. The root cause of the problem was that the feature was enabled by default upon launch, leading to uploads being triggered without users being fully aware, affecting a subset of users. The vulnerability has now been fixed.

To address the crisis of user trust, ZCode has proposed several long-term transparency initiatives. The company plans to open-source the ZCode codebase in the near future, invite third-party evaluators to conduct an independent review of the system, and will continue to publicly disclose the progress of these reviews to rebuild trust through transparency.

As compensation, ZCode has announced an extra weekly quota reset for all users, which was issued on the day the statement was released.