Black & White Path

Jul 14, 2026 · Information Security

How Grok Build Turns Your Code into a Data Vacuum

Security researchers discovered that xAI's Grok Build CLI silently uploads an entire Git repository—including .env files, API keys, and full commit history—to a Google Cloud bucket, sending about 5.1 GB of data when only 192 KB is needed, exposing severe privacy and design flaws.