Grok Build Exposes Thousands of User Projects, Including 24 SpaceXSI Apps
Updated
Updated · Ars Technica · Nov 10
Grok Build Exposes Thousands of User Projects, Including 24 SpaceXSI Apps
3 articles · Updated · Ars Technica · Nov 10
Summary
Thousands of Grok Build projects were accessible through share links, exposing proprietary business files, medical exam results, employee IDs and other sensitive data, according to security firm Claroc.
A developer design choice let outsiders enumerate supposedly randomized URLs, defeating the platform’s main safeguard and opening app data to anyone with the exact link.
Claroc said 24 exposed apps belonged to SpaceXSI itself, including a confidential onboarding plan, a sales territory map covering 594 accounts, internal tool addresses and ad proposals.
Sunday’s disclosure to SpaceXSI initially drew no response; after media questions, the company removed those 24 links, though Claroc said almost all other exposed data was still available when the report was published.