Grok Leaks Plaintext When Reading Files
julianharris · x · 2026-07-14
A post summarized findings on how Grok reads files: when reading files to answer questions or review code, the contents enter the cloud LLM's context in plaintext and are sent to the responses endpoint.
While architecturally expected for cloud models, the security implications are direct:
- Real keys inside .env files are transmitted to xAI servers
- Configuration files with credentials are transferred in full
- Relevant content leaves the local environment, posing privacy and key leakage risks
More from Safety
- Coding agents are heading toward an AI-writes, AI-reviews, human-approves workflow — aftahi_ai · 2026-07-22
- AI security course launches with a small cohort to train the next generation of hackers — wunderwuzzi23 · 2026-07-22
- OpenAI says long-horizon models need safety and alignment checks across full action sequences — rhiever · 2026-07-22
- Stanford HAI’s PNAS feature maps the legal questions around generative AI — StanfordHAI · 2026-07-22
- New Malware Lurking in Blind Spots Targets AI Infrastructure to Steal Data — Wired AI · 2026-07-22
- Generative AI Shatters SMB Security: Flawless Phishing and Voice Cloning at Scale — YvesMulkers · 2026-07-22