Z.ai's ZCode agent uploaded entire repositories, git history included, to Alibaba's cloud without asking
Prepared by Sintelligent with the help of SI. Publication time restored from the build log. . Updated: .
The more access we give agents, the more important it is to see what they do with our data: open-source agent code is becoming a must.
A researcher noticed a hung 313 MB encrypted archive on disk and took the app apart. It turned out that ZCode 3.12.3 periodically snapshots the entire working directory and uploads the snapshots to Alibaba Cloud OSS. The snapshots include the .git folder, 86.6% of the volume, with the full commit history, unpushed branches and files long since deleted from the code. The archives are encrypted with a key sent by the server, so the user cannot decrypt them. On the evening of September 18, Z.ai attributed the uploads to a code indexing feature enabled by default, said the data is deleted right after processing, and promised to open-source ZCode, bring in outside auditors and compensate affected users with usage limits. Version 3.14.0 has already removed this code.