A bare 'hi' prompt could hijack other users' Grok build sessions in June
Desperate-Ad117 · reddit · 2026-09-13
A Reddit user reports a serious session isolation failure: during June, sending a stateless "hi" with an empty tools list to a Grok build session still returned finishreason: toolcalls and executed readfile/grep inside another user's workspace.
- The failure was at the serving layer's tenant isolation, not a chatbot hallucination — one tenant's context was reachable from another
- Impact: a prompt as simple as "hi" could pull someone else's files, tools, and private session
- The author criticizes xAI for closing the issue as a hallucination and deprecating the model, arguing that doesn't prove the mix-up can't recur on whatever replaced it
Related event: Grok Build Environment Suspected of Tenant Isolation Flaw(2 posts)→
More from coding & agent
- Building a buyer agent that negotiates 8 seller agents: what broke and what fixed it — mv_soura · 2026-10-31
- PostTrainBench traces hit 104k monthly downloads — author warns it's likely reward hacking — maksym_andr · 2026-10-31
- Building games with AI? Set up a 'tech art' test scene to tune your look fast — chongdashu · 2026-10-31
- Sanity open-sources pi-mcp-events: streaming MCP Events client for the Pi agent harness — knutmelvaer · 2026-10-31
- Skydive opens to all: watch your AI coworkers work in a 3D office — Scobleizer · 2026-10-31
- LangChain SF meetup: decision models and a third path for agent evals — LangChain · 2026-10-31