xAI's Grok Build CLI Uploads Git Repositories to a Google Cloud Bucket
6 hours ago
- #data-collection
- #security
- #ai-tools
- xAI disabled the Grok Build CLI's ability to upload entire developer repositories to cloud storage after a security researcher exposed the behavior.
- The CLI was bundling and uploading full repositories, including Git history and secrets, to a Google Cloud Storage bucket, unrelated to the specific coding task.
- A toggle labeled 'Improve the model' did not stop the uploads; it only governed training consent, not data collection.
- The fix was implemented silently via a server-side flag, with no official advisory or statement from xAI on the purpose or fate of already collected code.
- The researcher's findings highlight undisclosed collection but do not confirm misuse, such as whether xAI trained on or viewed the uploaded code.