SECURITYTHE HACKER NEWS
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
xAI's Grok Build coding CLI uploads entire Git repositories, including full commit history, to a Google Cloud Storage bucket managed by xAI. A researcher named cereblab tested version 0.2.93, intercepted an upload, cloned the git bundle, and retrieved a file the agent was explicitly instructed not to access.
Mentioned
Related Signal