xAI coding tool found uploading private user code and sensitive files
Experts have found that the Grok Build CLI, an xAI coding agent, was silently transferring complete Git repositories to Google Cloud storage. This included sensitive information like unredacted secrets, full commit histories, and files that had not even been opened. After facing criticism regarding data privacy, xAI advised users to enable the "Zero Data Retention" (ZDR) setting to prevent such leaks. The company also noted that users can utilize the "/privacy" command if ZDR is currently disabled.
by shortkt.com✓