Grok Build CLI Secretly Uploaded Full Git History to xAI Servers

Researcher cereblab used mitmproxy to show that Grok Build CLI 0.2.93 sent a git bundle of the repository to xAI's storage endpoint even when the model replied only "OK". In one test 192 KB went to the model while 5.10 GiB went to storage; xAI disabled the upload via a server-side flag on July 13, 2026.

• In one test 192 KB went to the model, 5.10 GiB to xAI storage
• Uploads continued with the "Improve the model" toggle off
• xAI disabled uploads on July 13 via disable_codebase_upload flag
• A Read(secret.txt) deny rule blocked reading but the file still shipped