Back to feed
The Verge
The Verge
7/14/2026
SpaceXAI’s Grok programming tool was uploading its users’ entire codebase to cloud storage

SpaceXAI’s Grok programming tool was uploading its users’ entire codebase to cloud storage

Short summary

SpaceXAI's Grok Build CLI tool was found uploading users' entire codebases—including ignored files and deleted secrets—to Google Cloud, far exceeding data retention practices of tools like Claude Code. After Cereblab published its findings, SpaceXAI disabled the upload feature. The incident raises concerns about privacy defaults in AI coding tools.

  • •Grok Build CLI uploaded entire codebases including ignored files and deleted secrets to Google Cloud
  • •Cereblab researchers disclosed the issue; SpaceXAI disabled the upload flag afterward
  • •Data retention significantly exceeded comparable tools like Claude Code

Generated with AI, which can make mistakes.

#ai-tools#industry-adoption
Read full article at The Verge

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more

xAI Open-Sourced Grok Build Two Days After It Got Caught Exfiltrating Your SSH Keys
Dev.to
Security audit reveals data exfiltration and privacy risks across major AI coding tools in 2026
Dev.to
AI coding CLI found silently uploading full Git repositories bypassing privacy opt-out
Dev.to
Grok Build Is Now Open Source: What Developers Can Learn from Its Coding-Agent Architecture
Dev.to