OpenAI Dots, Meta Muse, Grok Bot: Who Owns Your AI Agent's Computer?

Description and use

<p><em>Facts as of September 30, 2026.</em></p> <blockquote> <p>"Do not use separate Bots as a security boundary."</p> </blockquote> <p>That sentence isn't from a pentest report. It's from xAI's own <a href="https://docs.x.ai/grok-bot/approvals-security-and-privacy" rel="noopener noreferrer">Grok Bot documentation</a>, for a product marketed as <a href="https://x.ai/news/introducing-grok-bot" rel="noopener noreferrer">"AI teammates you can give real work to."</a></p> <p>Within seven weeks, three of the biggest AI vendors shipped the same kind of product: an agent that runs around the clock, lo

Problem

<p><em>Facts as of September 30, 2026.</em></p> <blockquote> <p>"Do not use separate Bots as a security boundary."</p> </blockquote> <p>That sentence isn't from a pentest report. It's from xAI's own <a href="https://docs.x.ai/grok-bot/approvals-security-and-privacy" rel="noopener noreferrer">Grok Bot documentation</a>, for a product marketed as <a href="https://x.ai/news/introducing-grok-bot" rel="noopener noreferrer">"AI teammates you can give real work to."</a></p> <p>Within seven weeks, three of the biggest AI vendors shipped the same kind of product: an agent that runs around the clock, lo

Outcome

<p><em>Facts as of September 30, 2026.</em></p> <blockquote> <p>"Do not use separate Bots as a security boundary."</p> </blockquote> <p>That sentence isn't from a pentest report. It's from xAI's own <a href="https://docs.x.ai/grok-bot/approvals-security-and-privacy" rel="noopener noreferrer">Grok Bot documentation</a>, for a product marketed as <a href="https://x.ai/news/introducing-grok-bot" rel="noopener noreferrer">"AI teammates you can give real work to."</a></p> <p>Within seven weeks, three of the biggest AI vendors shipped the same kind of product: an agent that runs around the clock, lo

Evidence

OpenAI Dots, Meta Muse, Grok Bot: Who Owns Your AI Agent's Computer?

Source