Grok Got Caught With Its Hand in the Code Jar
ID: 22519297-8b8d-59ba-8c2a-ba91728a8dde
STIX ID: report--22519297-8b8d-59ba-8c2a-ba91728a8dde
Feed Name: Security Boulevard
Threat Score
**Executive summary:** Researchers reported that SpaceXAI's Grok Build coding agent was packaging and uploading complete user repositories — potentially including deleted secrets, API keys, and proprietary source code — to company-controlled cloud storage; SpaceXAI disabled default uploads, pledged to delete retained data, and released the Grok Build harness under Apache 2.0 while the report critiques the limits of that openness and urges retention-off-by-default, inspectable harnesses, and clearer vendor disclosures.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.