xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
ID: ec737ef6-3381-5e69-9f45-dcd8959433cc
STIX ID: report--ec737ef6-3381-5e69-9f45-dcd8959433cc
Feed Name: Krebs on Security
A public GitHub repository belonging to an xAI technical staff member contained a valid API key for roughly two months that allowed access to over 60 private and unreleased Grok LLMs—including models fine-tuned on SpaceX and Tesla data. GitGuardian discovered and alerted xAI, and although the repository was later removed and there is no evidence of active exploitation, the exposure poses risks such as prompt injection, model manipulation, and unintended disclosure of proprietary information.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
