Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Researcher finds 35,000 Grok Build apps wide open to anyone who looked for them.
Security researchers have uncovered alarming data leaks from Grok Build, a coding agent developed by SpaceXSI, the newly formed entity after the merger of SpaceX and xAI. The leaks, discovered by security firm Claroc, have exposed a vast array of sensitive information belonging to Grok Build's thousands of users, including proprietary business plans, medical exam results, and employee data.
Grok Build attempts to safeguard shared links by randomizing their URLs, but a design flaw allows anyone to view and access the data stored within these links, rendering the randomization ineffective. The leaked data encompasses confidential business strategies, advertising proposals, internal system addresses, and even employee names and ID numbers.
Ironically, some of the most sensitive information originates from apps built by SpaceXSI itself, a company now operating under the joint name of SpaceX and xAI. The research highlights the need for improved data protection measures within the Grok Build platform to prevent further exposure of sensitive user information.
Written by urgent.news from Ars Technica's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
