Executive Summary
xAI's Grok Build coding CLI (v0.2.93) uploaded entire Git repositories with full history to an xAI cloud bucket, not just files needed for the task, including a file the agent was told not to read.
What Happened
xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher publishing as cereblab, testing version 0.2.93, captured one of those uploads, cloned the git bundle out of the intercepted request, and pulled back a file the agent had been told in plain terms not
Affected Products
- xAI Grok Build CLI
Vulnerability / Attack Technique
Coding agent over-collecting repository data
Technical Mechanism
The CLI bundled the whole repository and history and sent it to xAI storage.
AI Security Category
LLM02:2025 Sensitive Information Disclosure
Relevant Frameworks
RealGround Analysis
The tool sent far more than the task required, including history that may contain old secrets. RealGround analysis: check what coding agents upload before using them on private code.
Recommended Controls
- Inspect network traffic of new coding agents
- Keep secrets out of Git history
- Use coding agents only on approved repositories
Related RealGround Service
AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/07/grok-build-uploads-entire-git.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.