The artificial intelligence-based coding tool called Grok Build, developed by SpaceXAI, was closed after it was detected that users had uploaded all their code bases to Google Cloud. The findings shared by Cereblab show that the tool transfers all code repositories to the cloud, including documents that are inaccessible to users and stored data that has been deleted in the past.

Researchers state that the Grok Build CLI tool retains much more data than similar tools such as Claude Code. Tests conducted on Monday confirm that SpaceXAI servers have now stopped loading the codebase and the system has disabled the relevant loading process.

Data Security Concerns and Musk’s Statements

In his statement on the X platform, Elon Musk announced that all information previously uploaded by Grok Build will be completely deleted. Although Musk argued that privacy settings are always taken into account, he asked users to allow them to keep their data to help with debugging processes.

Independent security researcher from King’s College London, Dr. Lukasz Olejnik states that data retention on this scale is excessive. Olejnik warns that the information at risk may include proprietary source codes, security vulnerabilities, personal information, infrastructure details and various credentials.

SpaceXAI’s Response and Technical Discussions

In its first statement regarding the issue, SpaceXAI stated that the /privacy command on the CLI disabled the data retention feature and deleted previously synchronized data. However, Cereblab emphasizes that this command is only a session-based setting and is not the key that radically solves the problem.

This discrepancy between the company’s analysis proposal and the researchers’ findings continues to raise questions about users’ data security. This situation poses a significant security risk, especially for software developers working on sensitive projects.

What do you think about the company’s approach to data management?