{"schema_version":"0.8.0","id":"LR-2026-0050","record_version":9,"title":"Zhipu ZCode repository snapshot upload without clear consent","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":49.7,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":6.08,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true},"gate_version":"gate-2026-09-24.4","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-09-24","extraction_run_id":null},"system":{"model_name":"ZCode","model_version":"3.14.0","developer":"Z.ai (Zhipu AI)","harness":"ZCode","tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":"enterprise","lifecycle_stage":"unknown","integration_type":"embedded","intended_use":"AI coding tool","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-09-20","incident_class":"privacy_leakage","failure_class":null,"agent_involved":false,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"Zhipu's ZCode AI coding tool could upload project data to a cloud server without clear consent, prompting user concerns; Zhipu completed a security overhaul, and version 3.14.0 removed the RepoWiki feature and the paths used to generate and upload local repository snapshots.","tags":[],"date_detected":null,"near_miss":null,"root_cause":"unknown","root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"ZCode version 3.14.0 removed the RepoWiki feature and the paths used to generate and upload local repository snapshots","precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"moderate, because data or systems of others touched, with a bounded scope stated: Project data could be uploaded to a cloud server without clear consent, touching data of users with a bounded scope stated.","harm_class":[],"affected_description":"a commercial project he was working on, including the project’s Git history","protected_class_involved":null,"data_categories_exposed":["private_repos"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://technode.com/2026/09/24/zhipu-says-zcode-removed-repository-upload-paths-after-data-controversy/","publisher":"TechNode","date":"2026-09-24","type":"press","title":"Zhipu says ZCode removed repository-upload paths after data controversy","archived_url":null},{"url":"https://www.scmp.com/tech/tech-trends/article/3368159/chinese-ai-firm-zai-faces-reputation-hit-after-users-spot-unauthorised-uploads?utm_source=rss_feed","publisher":"South China Morning Post","date":"2026-09-20","type":"press","title":"Chinese AI firm Z.ai faces reputation hit after users spot unauthorised uploads","archived_url":null,"attachment":"fingerprint"}],"per_field_confidence":{"system.model_name":"C","system.model_version":"C","system.harness":"C","system.intended_use":"C","system.developer":"C","system.autonomy_level":"D","system.deployment_context":"D","event.remediation":"C","event.agent_involved":"D","event.incident_class":"D","event.summary":"D","event.date_disclosed":"A","event.trigger":"D","event.detection_method":"D","impact.severity":"D","context.denominator_available":"D","context.country":"D","impact.severity_because":"D","system.tier":"D","system.lifecycle_stage":"D","system.integration_type":"D","event.root_cause":"D","impact.affected_description":"C","impact.data_categories_exposed":"D"},"field_citations":{"system.model_name":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."}],"system.model_version":[{"source_index":0,"quote":"ZCode version 3.14.0 removed the RepoWiki feature and the paths used to generate and upload local repository snapshots, while the source code has […]"}],"system.developer":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."},{"source_index":1,"quote":"Chinese AI firm Z.ai faces reputation hit after users spot unauthorised uploads"}],"system.harness":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."},{"source_index":1,"quote":"The issue came to light on Friday when an independent Chinese technical blogger known as Ferstar inspected a local directory in ZCode and found that a compressed file of 313 megabytes was pending upload to Alibaba Group Holding’s cloud storage service after failing 564 times, while a smaller 15-kilobyte file had been successfully sent."}],"system.intended_use":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."}],"event.remediation":[{"source_index":0,"quote":"ZCode version 3.14.0 removed the RepoWiki feature and the paths used to generate and upload local repository snapshots, while the source code has […]"}],"event.incident_class":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."},{"source_index":1,"quote":"The larger file, according to visible filenames, contained a snapshot of a commercial project he was working on, including the project’s Git history."}],"event.agent_involved":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."},{"source_index":1,"quote":"The issue came to light on Friday when an independent Chinese technical blogger known as Ferstar inspected a local directory in ZCode and found that a compressed file of 313 megabytes was pending upload to Alibaba Group Holding’s cloud storage service after failing 564 times, while a smaller 15-kilobyte file had been successfully sent."}],"event.summary":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."},{"source_index":1,"quote":"The issue came to light on Friday when an independent Chinese technical blogger known as Ferstar inspected a local directory in ZCode and found that a compressed file of 313 megabytes was pending upload to Alibaba Group Holding’s cloud storage service after failing 564 times, while a smaller 15-kilobyte file had been successfully sent."}],"impact.severity":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."},{"source_index":1,"quote":"The larger file, according to visible filenames, contained a snapshot of a commercial project he was working on, including the project’s Git history."}],"impact.severity_because":[{"source_index":0,"quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent."},{"source_index":1,"quote":"The larger file, according to visible filenames, contained a snapshot of a commercial project he was working on, including the project’s Git history."}],"event.date_disclosed":[{"source_index":1,"quote":"published: 2026-09-20"}],"system.integration_type":[{"source_index":1,"quote":"The issue came to light on Friday when an independent Chinese technical blogger known as Ferstar inspected a local directory in ZCode and found that a compressed file of 313 megabytes was pending upload to Alibaba Group Holding’s cloud storage service after failing 564 times, while a smaller 15-kilobyte file had been successfully sent."}],"system.deployment_context":[{"source_index":1,"quote":"The issue came to light on Friday when an independent Chinese technical blogger known as Ferstar inspected a local directory in ZCode and found that a compressed file of 313 megabytes was pending upload to Alibaba Group Holding’s cloud storage service after failing 564 times, while a smaller 15-kilobyte file had been successfully sent."}],"system.lifecycle_stage":[{"source_index":1,"quote":"The issue came to light on Friday when an independent Chinese technical blogger known as Ferstar inspected a local directory in ZCode and found that a compressed file of 313 megabytes was pending upload to Alibaba Group Holding’s cloud storage service after failing 564 times, while a smaller 15-kilobyte file had been successfully sent."}],"event.detection_method":[{"source_index":1,"quote":"The issue came to light on Friday when an independent Chinese technical blogger known as Ferstar inspected a local directory in ZCode and found that a compressed file of 313 megabytes was pending upload to Alibaba Group Holding’s cloud storage service after failing 564 times, while a smaller 15-kilobyte file had been successfully sent."}],"event.root_cause":[{"source_index":1,"quote":"Even though the company, also known as Zhipu AI, apologised and patched the vulnerability, developers said the incident was likely to weaken its reputation, especially at a time when cybersecurity is becoming a central issue in the AI industry."}],"impact.affected_description":[{"source_index":1,"quote":"The larger file, according to visible filenames, contained a snapshot of a commercial project he was working on, including the project’s Git history."}],"impact.data_categories_exposed":[{"source_index":1,"quote":"The larger file, according to visible filenames, contained a snapshot of a commercial project he was working on, including the project’s Git history."}],"context.country":[{"source_index":1,"quote":"Chinese AI firm Z.ai faces reputation hit after users spot unauthorised uploads"}]},"notes_on_gaps":"Only one source (TechNode press) is available. No source states event.date_occurred, event.trigger, event.detection_method, event.root_cause, system.autonomy_level, system.permissions_scope, system.tools_granted, system.guardrails_present, system.deployment_context, system.lifecycle_stage, system.integration_type, system.safeguard_state, system.production_intended, impact figures (direct_loss_usd, records_exposed, third_parties_affected_count, affected_description, data_categories_exposed, reversibility), context fields, or regulatory/coverage details. event.trigger omitted because no source states a cause. event.date_disclosed and system.tier not written (derived by rule). event.agent_involved=false classified from the described non-agentic upload behaviour. event.incident_class=privacy_leakage classified from the stated upload of project data to a cloud server without clear consent. impact.severity=moderate classified from the bounded scope of project data reaching a cloud server; no loss figure stated. event.summary written from the two cited sentences. system.tier: not set; no operator named and deployment_context is not a lab's. [aggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29] system.autonomy_level: no source states the arrangement. system.deployment_context: no source states where it ran. event.agent_involved: classified from described behaviour. event.incident_class: a source states personal or confidential data reached a party not entitled to it, with no attacker driving it. event.summary: classified from described behaviour. event.trigger: no source states a cause. event.detection_method: no source says who first noticed. context.denominator_available: no denominator is available for this incident. context.country: no source states the operator's location. [canonicalised by data/entities.json, 2026-09-30: system.developer 'Zhipu' -> 'Z.ai (Zhipu AI)'; the cited quote is unchanged] Merged with LR-2026-0052, which described the same incident; their sources are included here. [corrected by Srini Iyer, approved 2026-10-18 in the corrections review: duplicate of another record, merged] [corrected by Srini Iyer, approved 2026-10-22 in the corrections review: a judgement inferred by us that no source states was cleared] [corrected by Srini Iyer, approved 2026-10-22 in the corrections review: the date of the earliest source now names the earliest source the record holds]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"Zhipu's ZCode AI coding tool was used by developers on their local projects, with the ability to generate and upload local repository snapshots to a cloud server.","quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent.","source_index":0,"grade":"D"},{"step":"went_wrong","text":"The tool could upload project data to a cloud server without clear consent, breaching users' expectation of consent over their project data.","quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent.","source_index":0,"grade":"D"},{"step":"reached","text":"Local repository snapshots and project data could reach a cloud server; the sources do not state how many users or repositories were affected.","quote":"ZCode version 3.14.0 removed the RepoWiki feature and the paths used to generate and upload local repository snapshots, while the source code has […]","source_index":0,"grade":"D"},{"step":"caught","text":"Users raised concerns about the upload behaviour; the sources do not name a monitor or other first detector.","quote":"Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent.","source_index":0,"grade":"D"},{"step":"done","text":"Zhipu completed a security overhaul; version 3.14.0 removed the RepoWiki feature and the paths used to generate and upload local repository snapshots.","quote":"ZCode version 3.14.0 removed the RepoWiki feature and the paths used to generate and upload local repository snapshots, while the source code has […]","source_index":0,"grade":"D"}],"model":"deepseek-chat","prompt_version":"aggregate-2026-09-27.1","extracted_at":"2026-09-29","source_urls":["https://technode.com/2026/09/24/zhipu-says-zcode-removed-repository-upload-paths-after-data-controversy/"]}}