{
  "id": 19407191,
  "title": "Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI",
  "url": "https://urgent.news/2026/11/10/grok-build-coding-agent-leaks-oodles-of-confidential-info-some",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-10T21:12:59.000Z",
  "source": {
    "name": "Ars Technica",
    "slug": "ars-technica",
    "url": "https://arstechnica.com/security/2026/11/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/"
  },
  "original_language": "en",
  "account": "Security researchers have uncovered alarming data leaks from Grok Build, a coding agent developed by SpaceXSI, the newly formed entity after the merger of SpaceX and xAI. The leaks, discovered by security firm Claroc, have exposed a vast array of sensitive information belonging to Grok Build's thousands of users, including proprietary business plans, medical exam results, and employee data. Grok Build attempts to safeguard shared links by randomizing their URLs, but a design flaw allows anyone to view and access the data stored within these links, rendering the randomization ineffective. The leaked data encompasses confidential business strategies, advertising proposals, internal system addresses, and even employee names and ID numbers. Ironically, some of the most sensitive information originates from apps built by SpaceXSI itself, a company now operating under the joint name of SpaceX and xAI. The research highlights the need for improved data protection measures within the Grok Build platform to prevent further exposure of sensitive user information.",
  "summary": "Researcher finds 35,000 Grok Build apps wide open to anyone who looked for them.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}