SpaceXAI acknowledges data retention issue with Grok Build coding tool

SpaceXAI has acknowledged that its AI coding tool, Grok Build, retained coding data for some users during its early beta phase. This admission comes days after security researchers disclosed that the tool was uploading entire developer repositories, according to a recent report by Cyber Insider.

The controversy began when researchers reported that Grok Build's command-line interface uploaded complete source code repositories, including Git commit history, to Google Cloud Storage. This behavior raised significant privacy and intellectual property risks, particularly for enterprise users with proprietary code. SpaceXAI has since disabled default data retention for all Grok Build users, deleted previously retained coding data, and open-sourced the Grok Build harness and CLI.

The company has not yet published details on the extent of the data uploaded or whether affected users will be notified. Users who ran Grok Build during the affected period are advised to rotate any credentials that may have been present in uploaded code.

Source: Cyber Insider