Grok Build CLI Leaks Private Repositories
rickasaurus · x · 2026-07-14
xAI's Grok Build CLI was found to upload entire Git repositories to a Google Cloud bucket, including private codebases and unmasked API keys.
After researchers disclosed this through line-level analysis, the upload behavior appeared to be disabled via a hidden server-side switch. However, xAI has yet to clarify the scope of impact, data retention policies, or a deletion timeline. Even if the data is eventually deleted, credentials that have already left the local machine need to be rotated immediately.
More from coding & agent
- He benchmarks new models by having them build their own copilot — $28 of compute — bucolucas · 2026-10-27
- Should agents be allowed to change plans mid-task? Reddit debates the drift boundary — wistfulcracker84 · 2026-10-27
- HeyGen + Canva MCP turns slide speaker notes into an avatar presentation video — HeyGen · 2026-10-27
- Local beats cloud: Qwen 3.8 FN handles private student data as well as frontier models — dr_lm · 2026-10-27
- LLM Tails cuts agent input tokens 80% by making agents read before they write — savadks1818 · 2026-10-27
- 10 practical ways to run Astra computer use on Premiere Pro for video editing — beechinour · 2026-10-27