Security Research

0day Hunting the Day After xAI Open-Sourced grok-build (Part 3): Grok-Build-CLI's folder-trust Blind Spot and the Zero-Prompt RCE

Thinking 2026-07-18 15 min read Research Dossier
#AI Security#Vulnerability Analysis#Developer Security
On a near-black teal-blue background, a checkpoint gatehouse's fan-shaped scanning beam lights up geometric tokens on an inspection checklist one by one, while a document page and a permission card slip through a dark corridor beyond the beam's reach; in the foreground an open registry ledger lies perfectly blank — symbolizing the zero-prompt trust bypass caused by the folder-trust detection blind spot
Unlock to view this content.