Grok Build Uploads Full Git Repositories to xAI Storage

xAI's Grok Build command-line interface (CLI) was discovered to be uploading entire Git repositories, complete with their full commit history, to xAI's Google Cloud Storage. This behavior went beyond its intended function of uploading only the specific files required for a given coding task. A researcher, operating under the pseudonym cereblab, identified this issue while testing version 0.2.93 of the Grok Build tool.

Cereblab observed one such upload and was able to extract the Git bundle from the intercepted network request. Upon cloning this bundle, the researcher found that the agent had been instructed in plain text to perform actions that involved more than just reading the necessary files. The extent of the data exfiltration, encompassing the entire repository and its historical changes, raises significant concerns about data privacy and security for users of the Grok Build tool.

The implications of this vulnerability are substantial, as sensitive code, proprietary information, and past development decisions could be exposed. The fact that the upload included the complete commit history means that not only the current state of the codebase but also its evolution over time was being transferred to xAI's storage. This could potentially reveal architectural decisions, past vulnerabilities, or other internal development details that were not meant for external storage.

While the exact scope and duration of this issue are not fully detailed, the discovery by cereblab highlights a critical flaw in the Grok Build CLI's data handling protocols. Users who have utilized this version of the tool, or potentially earlier versions, may have had their entire Git repositories inadvertently uploaded. Further investigation is needed to determine if xAI has addressed this vulnerability and what measures are being taken to secure user data and prevent future occurrences of such over-uploading incidents.