A Hacker News post reveals that Grok CLI, the command-line interface for xAI's Grok AI model, allegedly uploaded a user's entire home directory to Google Cloud Storage (GCS). The incident, shared via a Twitter/X link, has garnered 6 points on Hacker News with zero comments as of posting. This raises immediate concerns about data privacy and the permissions granted to AI development tools operating locally.

Users running CLI tools with broad filesystem access may inadvertently expose sensitive files, credentials, and personal data to cloud endpoints. The lack of discussion on the thread suggests the report is either very recent or not yet widely verified. Security practitioners should audit CLI tool permissions, monitor outbound network traffic, and review vendor data handling policies.

Until xAI issues a statement, developers using Grok CLI are advised to restrict its filesystem access and verify upload behaviors.