SpaceXAI’s Grok programming tool was uploading its users’ entire codebase to cloud storage
SpaceXAI's Grok Build AI coding tool was spotted uploading users' entire codebases to Google Cloud before it was reported, and the company turned it off. The Register reports that Cereblab published findings on Monday showing how the Grok Build CLI was packaging and uploading entire code repositories, "including files it was told not to open and secrets deleted from history," significantly more data retention than similar tools like Claude Code. The researchers say that as of M
Get smart on it
SpaceXAI's Grok Build coding tool was automatically uploading users' entire codebases to cloud storage without adequate user control, including files the tool was instructed not to access and deleted secrets. A security researcher confirmed that this level of data retention is excessive and could expose proprietary source code, security vulnerabilities, personal data, infrastructure details, and credentials. The company disabled the upload feature after the issue was reported and stated that all previously uploaded data would be deleted. SpaceXAI's initial response pointing users to a privacy command was misleading, as that command only controlled per-session retention rather than addressing the core problem.
Related news
OpenAI’s new flagship model deletes files on its own, people keep warning
A number of social media posts claim that GPT-5.6 Sol deleted files and data without warning. OpenAI had basically disclosed the problem in June.
OpenAI pushes back on Apple trade secret lawsuit
OpenAI has issued another statement on the lawsuit, this time suggesting it lacks merit.
