ai
SpaceXAI Disabled Grok Build CLI Uploads and Said It Will Delete Uploaded Code
SpaceXAI's Grok Build tool sent entire code repositories to cloud servers, including restricted files. Researchers at Cereblab identified the behavior on Monday, after which the company disabled the upload function. Elon Musk said previously uploaded data will be deleted.
Jul 14, 3:25 PM·1m read1 source
The VergeAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
SpaceXAI’s Grok Build CLI packaged and uploaded entire user code repositories to Google Cloud, including files it was instructed not to open and secrets removed from history, The Verge reported. Cereblab published its findings on Monday. The researchers documented data retention that exceeded levels in comparable tools.
As of Monday, SpaceXAI servers returned a disable_codebase_upload flag and the upload function no longer activated. Elon Musk stated that all data previously uploaded by Grok Build will be completely and utterly deleted. He added that privacy settings are always respected, while asking users to allow SpaceXAI to retain data because it is helpful for debugging issues.
SpaceXAI said that when zero data retention is disabled, the /privacy command in the CLI turns off data retention and deletes previously synced data. Cereblab responded that /privacy functions only as a per-session toggle and did not address the underlying upload issue. Dr.
Lukasz Olejnik stated that the amount of data retention is excessive. He noted that the data at risk could include proprietary source code, information about security vulnerabilities, personal data, infrastructure details, and credentials. The Verge published its account of the incident on July 14, 2026, at 7:25 PM UTC.
