Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read

xAI’s Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed.

A researcher publishing as cereblab, testing version 0.2.93, captured one of those uploads, cloned the git bundle out of the intercepted request, and pulled back a file the agent had been told in plain terms not

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials An attacker was operating inside the network of 3BB, one of Thailand’s largest broadband providers, and maintained remote control

Read More

A WordPress vulnerability scored 9.2/10 is present in all versions since 2016

A WordPress vulnerability scored 9.2/10 is present in all versions since 2016 Source: Hacker News

Read More

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly

Read More