SpaceXAI Disables Grok Feature After Codebase Upload Discovery

SpaceXAI has reportedly disabled a data transmission function within its Grok Build AI coding tool following findings that the software was uploading entire user codebases to cloud infrastructure. Research from Cereblab, published on Monday, indicated that the Grok Build command-line interface was packaging and transmitting complete code repositories to external storage.

According to the researchers, the data transfer scope was extensive. The tool was observed uploading files it was instructed not to access and retaining secrets that had been deleted from history. Cereblab noted that this behavior resulted in significantly higher data retention compared to similar development utilities, such as Claude Code.

Following the report, tests conducted by the research group showed that SpaceXAI’s servers began returning a “disable_codebase_upload: true” flag. The researchers confirmed that the codebase upload process subsequently ceased firing. The uploads were routed through Alphabet Inc.‘s Google Cloud, a major provider in the internet content and information sector. Alphabet shares are currently trading at $359.75.

The incident highlights ongoing data privacy concerns regarding the deployment of AI assistants in software development environments. While the feature has been turned off, the discovery raises questions regarding the default data handling protocols of AI coding tools.

What to watch

• Official statements from SpaceXAI regarding the specific cause of the data retention.
• Updates to the Grok Build CLI documentation or user agreements.

Source: original release