xAI's Grok Build Uploaded Your Whole Repo, and the Privacy Toggle Did Nothing
A researcher found that xAI's Grok Build CLI, version 0.2.93, uploaded entire repository contents—including full commit history—to a cloud bucket regardless of user privacy settings. In a test, the agent obeyed an instruction not to read files, but the client-side software still uploaded a 5.1 GiB git bundle containing the repository and a canary file. The privacy toggle controlled only model trai…