Zhipu AI addresses code upload controversy, plans open-source release
Zhipu AI has addressed concerns over its ZCode code assistant, which sparked controversy due to its 'code repository indexing' feature. The feature, designed to generate local code repository indexes for session recovery and Repo Wiki, unintentionally uploaded user data during the Wiki generation process.
Zhipu AI confirmed the data was deleted after processing and has since fixed the related vulnerability. The company plans to open-source the code and invite third-party assessments to rebuild developer trust. Additionally, Zhipu AI provided an extra weekly quota reset to affected users, effective on the day of the statement release.
The incident highlights broader challenges in AI programming tools regarding data handling, default settings, and privacy transparency. Zhipu AI emphasized its commitment to transparency and security in its response.