xAI's Grok Build coding tool was found sending users' entire code repositories to cloud storage, including full Git history and in some cases sensitive files such as secrets and SSH keys. Researcher Cereblab said the CLI uploaded Git bundles to a Google Cloud Storage bucket even when asked not to open files, and confirmed the behavior stopped only after a server-side setting, disable_codebase_upload, was turned on. Elon Musk separately said previously uploaded user data would be deleted.
Why it matters: Developers and companies using Grok Build may have exposed source code, old secrets, and other sensitive local files without realizing it. Users should review whether the tool was used on sensitive repositories, rotate any exposed credentials, and verify data-retention settings before continuing to use it.
2026.07.14
100% relevant
This article establishes the underlying event: a researcher-documented data-handling problem in xAI's Grok Build CLI, xAI's server-side change to stop whole-repo uploads, and Musk's pledge to delete previously uploaded data.
← Back to all stories