Zai Disables AI Coding Assistant Features
Chinese startup Zai disabled features of its AI coding assistant after users reported unauthorized code uploads. The company apologized and patched the vulnerability.
Chinese startup China's Z.ai disabled features of its AI coding assistant on Monday after developers reported it uploaded local repositories to overseas cloud servers without consent. The incident exposes software vulnerability risks during automated code indexing. The rare public disclosure arrives as global regulators tighten scrutiny on frontier AI safety protocols.
Developers discovered the ZCode assistant transferred sensitive workspace data, including source code and database passwords, to ALIBABA GROUP HOLDING LTD cloud servers. Z.ai apologized and stated the automated indexing feature was active by default.
