Is your coding agent uploading all your code?
Security researcher cereblab found that SpaceXAI's Grok Build CLI version 0.2.93 uploaded the entire tracked Git repository, including full commit history, to a Google Cloud Storage bucket, transmitti…
Security researcher cereblab found that SpaceXAI's Grok Build CLI version 0.2.93 uploaded the entire tracked Git repository, including full commit history, to a Google Cloud Storage bucket, transmitti…
XAI's Grok Build coding CLI silently uploaded entire Git repositories — including full commit history and deleted credentials — to a Google Cloud Storage bucket, sending 5.10 GiB per session versus ro…
A researcher found that xAI's Grok Build CLI, version 0.2.93, uploaded entire repository contents—including full commit history—to a cloud bucket regardless of user privacy settings. In a test, the ag…
XAI open-sourced its Grok Build CLI under Apache 2.0 on July 15, three days after security researcher cereblab documented that version 0.2.93 was silently uploading developers' entire Git repositories…
A security researcher found that xAI's Grok Build silently uploads entire codebases to Google Cloud, even with the 'Improve the model' toggle disabled, and xAI has not issued a public statement. Separ…
A security researcher known as cereblab found that xAI's Grok Build coding agent CLI 0.2.93 uploaded 5.10 GiB of data to a Google Cloud Storage bucket named `grok-code-session-traces` when only 192 KB…
A security researcher published a wire-level analysis on July 12 proving that xAI's Grok Build coding CLI was packaging developers' entire tracked repositories, including full Git history, committed s…
SpaceXAI's Grok Build CLI has been secretly uploading users' entire private git repositories to internal Google Cloud storage by default, according to an independent security researcher and two users …
Packet captures of xAI's Grok Build CLI 0.2.93 show the tool uploading entire Git repositories (including full history and secrets) to a Google Cloud Storage bucket named `grok-code-session-traces`, i…
A wire-level teardown of xAI's Grok Build CLI 0.2.93 revealed that the tool uploaded full Git repository bundles to a Google Cloud Storage bucket on every session, regardless of model context or the u…
Independent AI safety researcher @cereblab has published a wire-level analysis showing that xAI's Grok Build CLI (version 0.2.93) transmits the entire repository contents, including files the agent wa…