Grok Coding Tool Caught Uploading Entire Codebase
The Verge AI · rss · 2026-07-15
The Verge reports that xAI's Grok Build coding tool was found uploading a user's entire codebase to Google Cloud, including files it was explicitly told not to open and deleted secrets from history.
Researchers noted that this data uploading behavior is more aggressive than data retention practices of similar tools like Claude Code. Subsequently, xAI's servers returned the disablecodebaseupload: true flag, and the uploading behavior has stopped. Elon Musk has also responded to the issue.
More from coding & agent
- SF 'Code Engineering' event picks up where 1,000-person harness engineering meetup left off — LangChain · 2026-10-27
- Prompt turns Claude Code into an iPhone backup forensics tool exposing 30-day 'deleted' photo copies — alex_verem · 2026-10-27
- Prompt turns Claude Code into a forensics tool finding deleted iPhone photos in backups — alex_verem · 2026-10-27
- Phones won't be mobile IDEs but control planes for agent fleets, argues Yuchen Jin — Yuchenj_UW · 2026-10-27
- FrontierCS 2 launches on Kaggle: 48 tasks make agents beat published CS papers — MeganRisdal · 2026-10-27
- Agent Field Kit launches $29 security runbooks for production AI agents — alvelda · 2026-10-27