SpaceXAI’s Grok software tool was to upload all user codebases to cloud storage

SpaceXAI’s Grok Build AI scripting tool was seen uploading all of its users’ codebases to Google Cloud before reporting it, and the company shut it down. The Register they say cereblab which was published on Monday showing how the Grok Build CLI installed and installed all databases, “including files that were told not to open and secrets to be removed from history,” saving more than similar tools like Claude Code.

The researchers say that as of Monday, their tests show SpaceXAI servers are returning the “disable_codebase_upload: true” flag, and the codebase upload is “no longer enabled.”

Elon Musk responded to the incident by posting on X to say that all previously uploaded Grok Build data will be “completely deleted.” Musk also said that separate post that “privacy interests are always respected,” but asked users to allow SpaceXAI to keep their data, saying that “it is useful to solve the problem.”

Dr. Lukasz Olejnik, an independent researcher at King’s College London, confirmed that Seaside that the scope of this data storage is “expanding,” adding that the potential risks may include “proprietary information, security risk information, personal information, organizational information, (and) history.”

SpaceXAI originally responded to this article with post to say, “If (zero data storage) is disabled, the /privacy command is available in the CLI to disable data storage, which also deletes previously logged data.” However, Cereblab said that “/ key is the change for each part, not the change that set this, so it shouldn’t point to it as a control.”