Description: Developers reported that Z.ai's ZCode AI coding assistant uploaded local code repositories to Alibaba Cloud without consent. Z.ai said a default-enabled Codebase Indexing feature caused the behavior, apologized, patched the vulnerability, and later disabled the upload path. One company retracted a separate claim that six workspaces containing sensitive data had been uploaded; Z.ai said independent reviews found no code data retained.
Entities
View all entitiesAlleged: Z.ai and AI software developers developed an AI system deployed by Z.ai and AI service providers, which harmed ZCode users , Information integrity , Privacy , Software developers and AI coding assistant users.
Alleged implicated AI systems: ZCode AI coding assistant , AI code generation systems , ZCode Codebase Indexing feature and Enterprise AI systems
Incident Stats
Incident ID
1714
Report Count
1
Incident Date
2026-09-18
Editors
Daniel Atherton
Incident Reports
Reports Timeline
Loading...
BEIJING, Sept 21 (Reuters) - Chinese startup Z.ai said on Monday it had disabled some features of its flagship AI coding assistant after some users reported it was uploading entire local code repositories onto overseas cloud servers withou…
Variants
A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.
Seen something similar?
Similar Incidents
Did our AI mess up? Flag the unrelated incidents
Similar Incidents
Did our AI mess up? Flag the unrelated incidents