Grok Build uploaded entire code bases to SpaceXAI without telling users

"Allowing this would be appreciated, but your privacy settings are always respected," says Musk

Jul 14, 2026 3:34 PM 3 min read

Grok Build uploaded entire code bases to SpaceXAI without telling users — Image credit: https://unsplash.com/@hjmckean

SpaceXAI's coding agent, Grok Build CLI, has been quietly exfiltrating users’ entire private git repositories to internal Google Cloud storage by default.

An independent security researcher using the GitHub handle "cereblab" published analysis on Saturday suggesting the Grok Build CLI captured user's entire git repositories and history and shipped it back to xAI.

Two Grok Build CLI users told The Stack that after reviewing their logs, they observed what they believe were private repos being exfiltrated without their knowledge.

This content is for members only

Already have an account? Sign in

Add The Stack on Google

Noah Bovenizer

Noah Bovenizer is a senior reporter with The Stack. He previously covered the transportation sector for Global Data. He has a first class degree in journalism and has also worked as a newsreader for Gaydio.
Kiera Fields

Kiera Fields is head of special projects at The Stack and was previously at Business Insider. She writes about leadership, tech and business, covering everything from earnings calls to C-suite interviews.