SpaceXAI’s Grok programming tool was uploading its users’ entire codebase to cloud storage

SpaceXAI’s Grok Build AI coding instrumentality was spotted uploading users’ full codebases to Google Cloud earlier it was reported, and the institution turned it off. The Register reports that Cereblab published findings connected Monday showing really the Grok Build CLI was packaging and uploading full codification repositories, “including files it was told not to unfastened and secrets deleted from history,” importantly much information retention than akin devices for illustration Claude Code.

The researchers opportunity that arsenic of Monday, their tests show SpaceXAI’s servers returning a “disable_codebase_upload: true” flag, and the codebase upload “no longer fires.”

Elon Musk responded to the incident successful a station connected X claiming that each information Grok Build antecedently uploaded will beryllium “completely and utterly deleted.” Musk besides said successful a abstracted post that “privacy settings are ever respected,” but asked users to let SpaceXAI to clasp their data, saying it’s “helpful for debugging issues.”

Dr. Lukasz Olejnik, an independent information interrogator astatine King’s College London, confirmed to The Verge that this magnitude of information retention is “excessive,” adding that the information perchance astatine consequence could see “proprietary root code, accusation astir information vulnerabilities, individual data, infrastructure details, [and] credentials.”

SpaceXAI initially responded to the rumor pinch a post saying that, “If [zero information retention] is disabled, the /privacy bid is disposable successful the CLI to disable information retention, which besides deletes antecedently synced data.” However, Cereblab points retired that “/privacy is simply a per-session retention toggle, not the move that fixed this, truthful it shouldn’t beryllium pointed to arsenic the control.”