Grok/xAI: Unauthorized Repository Exfiltration and Indirect Prompt Injection Risk
The "Grok Build" feature within the xAI ecosystem has been identified as facilitating the unauthorized bulk upload of entire Git repositories to xAI-controlled infrastructure. Technical analysis indicates that Git hooks or unauthorized integration scripts trigger synchronization without explicit user consent, exposing proprietary source code, internal architectures, and hardcoded secrets—including API keys and SSH credentials—to third-party servers. Furthermore, the platform is vulnerable to Indirect Prompt Injection; malicious actors can deploy crafted payloads via fake bug reports to hijack AI coding agents possessing repository access. This dual-vector threat significantly expands the organizational attack surface, facilitating both data exfiltration and automated exploitation of codebase vulnerabilities.