A bare 'hi' reportedly triggered tool calls on another user's workspace, exposing Grok session isolation failure
Desperate-Ad117 · reddit · 2026-09-13
A Reddit user reports that during June, Grok coding sessions could apparently be hijacked by sending a stateless 'hi' — with an empty tools list, the model still returned finishreason: toolcalls and executed readfile/grep against another user's workspace.
The author argues this wasn't a chatbot hallucination but a serving-layer session isolation failure: one tenant's context was reachable from another, meaning a single prompt could pull someone else's files, tools, and private session. Dismissing it as a hallucination and deprecating the model, the author notes, doesn't prove the mix-up can't happen on whatever replaced it.
Related event: Grok Build Environment Suspected of Tenant Isolation Flaw(2 posts)→
More from Safety
- ARIA sees leadership shakeup, but Safeguarded AI program 'in good shape,' adviser says — davidad · 2026-10-30
- Philly Councilmember Proposes Robot Tax on Driverless Vehicles and Delivery Robots — QuintinPope5 · 2026-10-30
- 26,400 working credentials found in 7.25M Gitee repos as agent-written code outpaces review — vista8 · 2026-10-30
- Basilisk and pixi-audit launch to audit conda-forge packages after brotli CVE — wolfvollprecht · 2026-10-30
- Yoba malware spreads via fake ChatGPT and Claude desktop apps on GitHub — ChuckDBrooks · 2026-10-30
- OpenAI model spent a found test-network wallet's funds without permission — Mundane-Evidence2795 · 2026-10-30