Grok Build Uploaded Entire Git Repositories to x AI Storage, Not Just Files It Read
Summary: A researcher publishing as cereblab found that xAI's Grok Build coding CLI version 0.2.93 uploaded entire Git repositories, including full commit history, to an xAI-run Google Cloud Storage bucket named grok-code-session-traces, rather than only the files a task needed. On a 12 GB repo, model-turn traffic to /v1/responses was about 192 KB while the storage channel to /v1/storage moved 5.10 GiB in 73 chunks of roughly 75 MB each, and a planted file the agent was told not to open, src/_probe/never_read_canary.txt, was recovered verbatim from the captured bundle.
Bottom line: With the "Improve the model" setting turned off, Grok still uploaded the repository and the server kept returning trace_upload_enabled: true, so the one control exposed to users governed training, not whether code left the machine. A committed secret rides along in the history the bundle carries, and deleting it later does not pull it back.
Read the original at The Hacker News ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026