xAI's Grok Build coding tool was found sending users' entire code repositories to cloud storage, including full Git history and in some cases sensitive files such as secrets and SSH keys. Researcher Cereblab said the CLI uploaded Git bundles to a Google Cloud Storage bucket even when asked not to open files, and confirmed the behavior stopped only after a server-side setting, disable_codebase_upload, was turned on. Elon Musk separately said previously uploaded user data would be deleted.
Why it matters: Developers and companies using Grok Build may have exposed source code, old secrets, and other sensitive local files without realizing it. Users should review whether the tool was used on sensitive repositories, rotate any exposed credentials, and verify data-retention settings before continuing to use it.
2026.09.22
94% relevant
This is a closely parallel follow-up on the same kind of event: an AI coding tool was found uploading users’ full workspaces or repositories to cloud storage without adequate disclosure or control. The new reporting adds that Z.ai apologized, says uploaded data was deleted, removed the Repo Wiki feature tied to the uploads, and open sourced ZCode after scrutiny.
2026.07.14
100% relevant
This article establishes the underlying event: a researcher-documented data-handling problem in xAI's Grok Build CLI, xAI's server-side change to stop whole-repo uploads, and Musk's pledge to delete previously uploaded data.
← Back to all stories