Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads

xAI's Grok Build coding CLI was found to be uploading entire Git repositories to a Google Cloud Storage bucket, including full commit history. This was discovered by a researcher testing version 0.2.93, who captured an upload and cloned the git bundle from the intercepted request. The upload included more than just the files needed for a coding task, also pulling in other files. A file that the agent had been explicitly told not to access was retrieved by the researcher. The researcher was able to intercept and examine the uploaded data. The issue affects the security of the Git repositories being uploaded.