Spacexai’s Grok Programming Tool Was Uploading Its Users’ Entire Codebase To Cloud Storage

SpaceXAI’s Grok Build AI coding instrumentality was spotted uploading users’ full codebases to Google Cloud earlier it was reported, and nan institution turned it off. The Register reports that Cereblab published findings connected Monday showing really nan Grok Build CLI was packaging and uploading full codification repositories, “including files it was told not to unfastened and secrets deleted from history,” importantly much information retention than akin devices for illustration Claude Code.

The researchers opportunity that arsenic of Monday, their tests show SpaceXAI’s servers returning a “disable_codebase_upload: true” flag, and nan codebase upload “no longer fires.”

Elon Musk responded to nan incident successful a station connected X claiming that each information Grok Build antecedently uploaded will beryllium “completely and utterly deleted.” Musk besides said successful a abstracted post that “privacy settings are ever respected,” but asked users to let SpaceXAI to clasp their data, saying it’s “helpful for debugging issues.”

Dr. Lukasz Olejnik, an independent information interrogator astatine King’s College London, confirmed to The Verge that this magnitude of information retention is “excessive,” adding that nan information perchance astatine consequence could see “proprietary root code, accusation astir information vulnerabilities, individual data, infrastructure details, [and] credentials.”

SpaceXAI initially responded to nan rumor pinch a post saying that, “If [zero information retention] is disabled, nan /privacy bid is disposable successful nan CLI to disable information retention, which besides deletes antecedently synced data.” However, Cereblab points retired that “/privacy is simply a per-session retention toggle, not nan move that fixed this, truthful it shouldn’t beryllium pointed to arsenic nan control.”