xAI's Grok Build CLI Uploads Git Repositories to a Google Cloud Bucket

Security researchers discovered that xAI's Grok Build CLI was secretly uploading entire local Git repositories to a Google Cloud bucket, regardless of user privacy settings. The tool, marketed as local-first, continued this behavior even when the 'Improve the model' data-collection toggle was disabled.
xAI appears to have shut off the mechanism that let its Grok Build CLI upload complete developer repositories to company-controlled cloud storage, according to follow-up testing by the security researcher who exposed the behavior. The fix arrived as a hidden server-side flag, with no advisory, no statement, and no answer on what happens to code already collected.
Get the full story
Sign up for Headlinne to unlock AI insights, political bias analysis, and your personalized news feed.
Create free accountAlready have an account? Sign in