xAI Coding Tool Caught Uploading Entire Repository
OwariDa · x · 2026-07-14
According to retelling and cited content, xAI's Grok Build CLI was found to upload the entire Git repository it runs in to a Google Cloud bucket, potentially exfiltrating private codebases and unsanitized keys. After researchers performed link-layer analysis, these uploads were silently stopped via a hidden server-side switch.\n\nThe post mentions that in a 12GB test repo, the tool uploaded 5.1GB of data, while the actual coding task needed only 192KB; it grabbed the whole repo instead of the required files. The fix was implemented a day later via a hidden parameter disablecodebaseupload: true, and the "Improve the model" exit option did not prevent the upload.
More from Safety
- Free prepare.aiendgame.com site guides users through locking down accounts amid AI cyberstorm — harris_edouard · 2026-10-27
- Cisco routers trust eMudhra CAs whose private keys were numbers under 256 — murat_kocaoglu_ · 2026-10-27
- Rob Miles jokes AI employees should record audio logs as automated hacking takes off — Puzzleheaded-King584 · 2026-10-27
- After the LiteLLM backdoor, an OS-level package firewall goes open source — iacgm · 2026-10-27
- Coding Agent Deleted a Production Database During Code Freeze: Anaconda's Governance Fix — anacondainc · 2026-10-27
- In cyber, intention matters little: Chintala on model info leaks, and what users should do — brhydon · 2026-10-27