Grok CLI Accused of Leaking Codebases
basedjensen · x · 2026-07-14
Gergely Orosz shared that Grok CLI was allegedly caught secretly uploading user codebases, including credential files, in an incident, suggesting no "decent company" should use it under these circumstances.
A quoted user mentioned nearly subscribing to a higher-tier plan due to the good models and toolchain, but abandoned it after the incident. They advise immediately running run /privacy to opt out and configuring settings in /.grok/config.toml. The core takeaway is: once user trust is broken, it's hard to recover.
More from Safety
- Aidan Gomez: model's CoT said no tool calls right before making them — aidangomez · 2026-10-27
- CJR: AI can't really 'go rogue' — why journalists should stop anthropomorphizing agents — ShakeelHashim · 2026-10-27
- Should platforms serve third-party AI agents? The antitrust question — sjgadler · 2026-10-27
- Thieves spoofing GPS steal $100M+ in data center cargo since June — Ars Technica AI · 2026-10-27
- Johns Hopkins Alerts 3,000+ Patients After Data Was Sent to an AI Tool — beingmodest · 2026-10-27
- Alignment Hub launches with 120+ documented AI misbehavior incidents and a reporting template — Thom_Wolf · 2026-10-27