Vercel CLI caught uploading all your code by default with AI training opt-in enabled

kingslyj · x · 2026-11-08

A developer testing Vercel's sandboxes found that simply running the vercel CLI — logging in and connecting a project — immediately uploaded all code in the current directory, with no prompt or disclosure.

Checking settings revealed "Data Preferences" is enabled by default: Vercel may share code and chat data with AI model providers for training purposes, and users must manually opt out (or disable globally at team level). The developer called out CEO @rauchg, raising concerns about data practices in developer tools.

Original post →

More from coding & agent

coding & agent channel →