xAI's coding tool caught stealing users' entire codebases, secret files

Researchers discovered that xAI's Grok Build CLI, coding agent, quietly uploaded developers' entire Git repositories, including commit histories, unredacted secrets and unopened files, to its Google Cloud storage. Following backlash over privacy concerns, SpaceXAI asked users to turn on "Zero Data Retention" (ZDR) to avoid data breaches. If ZDR is off, users can run "/privacy" command, it added.

Load More