Grok Build CLI Uploads Full Git History and .env Secrets to xAI Cloud
Reports indicate a significant security concern regarding the Grok Build CLI. The tool reportedly uploads a user's full Git history to
Reports indicate a significant security concern regarding the Grok
Build CLI. The tool reportedly uploads a user's full Git history to
the cloud. In addition to history, .env files containing secrets may
be uploaded. These uploads are directed to xAI's cloud infrastructure.
This behavior poses a risk to sensitive repository data. Developers
are noting the potential exposure of private credentials. The issue
highlights the risks of automated CLI tools. Users should be aware of
how their local data is handled by this tool.