Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

Security firm Claroc found that Grok Build, the vibe-coding agent from SpaceXSI, exposes confidential data from thousands of users through shareable app links whose URLs can be enumerated, including material from 24 apps built by SpaceXSI itself. The exposed data included an onboarding plan marked confidential for a new SpaceXSI enterprise sales team member, a sales territory map of 594 accounts, internal sales tool system addresses, advertising proposals, medical exam results, and employee names and ID numbers, with some affected users working for Fortune 500 companies and a defense contractor. SpaceXSI began removing the 24 SpaceXSI app links within hours of Ars Technica sending questions, and all 24 returned "app not found" errors by the time Claroc's Tuesday post went live.

Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive secrets—from thousands of its users, including the very same Elon Musk-owned company that offers the platform, new research shows. The information is revealed through links allowing Grok Build users to share their apps with others. Grok takes steps to randomize the URLs so only people who know the exact URL can access the data stored there. A design decision by developers of the platform, however, completely torpedoes that objective and makes it possible for anyone to enumerate thousands of live Grok Build projects. Except in rare cases, clicking those links opens the app and reveals all data associated with it. You had one job Research from security firm Claroc shows that the exposed data includes things like internal business plans, ad proposals, medical exam results, galley checklists from a celebrity cruise line, and employee names and ID numbers. Ironically, some of the sensitive data comes from two-dozen apps built by SpaceXSI the name of the now-merged SpaceX and xAI itself. A small sampling of the documents revealed in the SpaceXSI apps—Claroc found 24 of them—include an onboarding plan, marked confidential, for a new member of SpaceXSI’s enterprise sales team, a sales territory map of 594 accounts, internal system addresses for sales team tools, and advertising proposals. “We were shocked,” Claroc said in a Tuesday post https://blog.claroc.io/ghostshares-grok-build-apps/ . “The company that makes Grok had its own internal material open to anyone holding the link, and we had never been given it. Had the sales team bought a tool for this, it would have sat behind company sign-in, open only to the team. Built with AI, it went live open to anyone with the link. At the time this post went live almost all data remained available with one notable exception: the contents from the 24 SpaceXSI apps. All of them were exposing the information on Monday evening. SpaceXSI began removing the links within a few hours of Ars sending an email with questions for this article. At the time this post went live, links for all 24 apps returned an “app not found” error. Claroc found sensitive data belonging to other Grok Build users, some working for Fortune 500 companies and a defense contractor. Some of the affected organizations and data revealed includes: