Security · 1h ago
Grok Build CLI Leaks Entire Git Repos to xAI Cloud
xAI's Grok Build coding tool was uploading full Git repositories, including commit history, to a Google Cloud Storage bucket, not just files needed for tasks. A researcher captured version 0.2.93 sending a git bundle that contained a file the agent was told not to access. The uploads occurred without user consent or clear disclosure.
Meridian48 take
This is a serious data leak that undermines trust in AI coding assistants, especially when the tool ignored explicit instructions about file access.
Read the full reporting
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads →
The Hacker News
data-leakai-coding-tool