A bare 'hi' reportedly triggered tool calls on another user's workspace, exposing Grok session isolation failure

Desperate-Ad117 · reddit · 2026-09-13

A Reddit user reports that during June, Grok coding sessions could apparently be hijacked by sending a stateless 'hi' — with an empty tools list, the model still returned finishreason: toolcalls and executed readfile/grep against another user's workspace.

The author argues this wasn't a chatbot hallucination but a serving-layer session isolation failure: one tenant's context was reachable from another, meaning a single prompt could pull someone else's files, tools, and private session. Dismissing it as a hallucination and deprecating the model, the author notes, doesn't prove the mix-up can't happen on whatever replaced it.

Related event: Grok Build Environment Suspected of Tenant Isolation Flaw(2 posts)→

Original post →

More from Safety

Safety channel →