Grok Build uploaded entire code bases to SpaceXAI without telling users

SpaceXAI's Grok Build CLI has been uploading users' entire private git repositories to internal Google Cloud storage by default without informing them, according to an independent security researcher and two users who reviewed their logs.

Grok /tag/grok/ SpaceXAI's coding agent, Grok Build CLI, has been quietly exfiltrating users’ entire private git repositories to internal Google Cloud storage by default. An independent security researcher using the GitHub handle " cereblab https://gist.github.com/cereblab?ref=thestack.technology " published analysis on Saturday suggesting the Grok Build CLI captured user's entire git repositories and history and shipped it back to xAI. Two Grok Build CLI users told The Stack that after reviewing their logs, they observed what they believe were private repos being exfiltrated without their knowledge. Get the full story: Subscribe for free Join peers managing over $100 billion in annual IT spend and subscribe to unlock full access to The Stack’s analysis and events. Subscribe now https://www.thestack.technology/membership/ Already a member? Sign in https://www.thestack.technology/signin/