Grok has a "cryptographic context injection" vulnerability, putting user chat data at risk of leakage

According to Cryptopolitan, cybersecurity company Adversa AI disclosed that xAI's AI assistant Grok has a security vulnerability known as "cryptographic context injection." Attackers can hide cryptographic commands within ordinary web pages, and when users request Grok to summarize the page, Grok automatically decrypts and executes the hidden commands, sending the user's name, geographical location, subscription level, and complete chat history to the attacker's server.

The vulnerability was reported to xAI through the HackerOne platform on June 3, 2026. Researcher Rony Utevsky followed up on August 4 and 10, but as of August 19, the vulnerability had still not been fixed on Grok.com, and xAI had not provided a patch timeline.