xAI's Grok CLI Uploaded a File It Was Explicitly Told Not to Read (gist.github.com)
On a 12-gigabyte test repository, xAI's coding CLI quietly uploaded 5.1 gigabytes as a background git bundle, against 192 kilobytes that actually passed through the chat with the model — a 27,800-to-1 gap the researcher used as proof the whole repo goes up, read or not.
Turning off the CLI's own "Improve the model" setting changed nothing; the server kept reporting uploads as enabled. In the thread, one developer dropped Grok Build over it, others started sandboxing every coding agent behind their own network proxies.
Sign in to save