The blockchain security firm SlowMist has released a technical audit detailing significant security risks within the Grok Build CLI tool. The investigation, published on July 18, 2026, highlights critical flaws in data uploading mechanisms and permission management systems. These vulnerabilities could potentially expose developers to sensitive data leaks and remote code execution (RCE), posing a threat to the integrity of development environments within the cryptocurrency and software engineering sectors.
Data Exposure and Remote Code Execution Risks
SlowMist’s analysis began with the Grok CLI repository upload mechanism, which was found to inadvertently transmit git bundles containing highly sensitive information. This data often includes .env files and RSA private keys, which are essential for securing blockchain nodes and private server access. Furthermore, the audit identified a critical misclassification of the cargo check command.
- Command Misclassification: The tool incorrectly labels "cargo check" as a safe operation.
- Instruction Injection: Malicious AGENTS.md instructions can exploit this misclassification.
- RCE Vulnerability: By triggering the execution of build.rs, attackers can achieve remote code execution on the user's system.
Permission Bypass and Inherited Flaws
The security firm also pointed out specific flaws in the tool's configuration settings. The bypassPermissions feature located in .claude/settings.json allows for the circumvention of standard security checks, leading to unrestricted tool execution. SlowMist noted that Grok Build CLI appears to inherit the permission configuration model of Claude Code CLI, thereby duplicating existing security risks associated with that framework.
Grok Build CLI inherits the permission configuration model of Claude Code CLI, posing similar risks;.mcp.j... the team continues to audit the security model to identify further vulnerabilities.
The discovery of these vulnerabilities underscores the ongoing challenges in securing developer-focused tools in the Web3 ecosystem. By identifying these permission management flaws, SlowMist provides essential data for developers to patch their systems. Users of Grok Build CLI are advised to review their .claude/settings.json files and exercise caution when executing commands from untrusted repositories to prevent potential asset loss or system compromise.
Frequently Asked Questions
Quick answers to the most common questions about this topic.
For educational purposes only. Nothing here constitutes financial or investment advice. Crypto markets are highly volatile — always DYOR before making any decisions.
Fact-checked per our editorial policy. We maintain strict independence from advertisers. Spot an error? Let us know.