logo

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

ID: ec737ef6-3381-5e69-9f45-dcd8959433cc

STIX ID: report--ec737ef6-3381-5e69-9f45-dcd8959433cc

Feed Name: Krebs on Security

Threat Score
70/100

Date Published: 2025-05-02

Date Updated: 2026-04-19

Author: BrianKrebs

...
...

A public GitHub repository belonging to an xAI technical staff member contained a valid API key for roughly two months that allowed access to over 60 private and unreleased Grok LLMs—including models fine-tuned on SpaceX and Tesla data. GitGuardian discovered and alerted xAI, and although the repository was later removed and there is no evidence of active exploitation, the exposure poses risks such as prompt injection, model manipulation, and unintended disclosure of proprietary information.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.