Grok Bot 被指可越权读取私聊，且可复现

Chaos Coordinator @idontexistTore原推发布于 2026.10.25

在 X 上打开原推

This is reproducible. Using the Grok Bot playground, you can test delegate access to private conversations yourself — read what a delegate can see, attempt revocation, and watch the plugin reconnect. Anyone with a merged account can verify this in minutes. That's what makes it an exploit, not a complaint.