Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads

xAI's Grok Build coding CLI was found uploading entire Git repositories, including full commit history, to a Google Cloud Storage bucket without user consent. The data included tracked files and credentials, even when the 'Improve the model' setting was disabled. Although xAI later disabled the upload feature server-side, the incident exposed sensitive source code and secrets by design, raising serious data privacy and security concerns for developers using the tool.

AI-extracted · verify before operational use