Grok Build coding agent leaks confidential data from users

Tier B · Patch this week – Put it in the sprint

Who’s exposed: Thousands of Grok Build users, including SpaceXSI itself

Tier B because: Full takeover OR secrets exposed OR supply chain

Reach

Attack

Damage

Fix

Secrets exposed

The Brief

Grok Build, the vibe-coding agent from SpaceXSI, is reported to leak proprietary business information and other sensitive secrets.
The leaked data comes from thousands of users, according to new research cited by Ars Technica.
The leak includes data belonging to SpaceXSI, the company that offers the platform.

Why it matters

Developers who use Grok Build may have confidential code, business data or secrets exposed to others, so they should assume their data could be affected until more details are published.

The checklist behind the tier

Checklist · 2 of 10 yes

Yes	Hits tech teams	Judgment: Grok Build is a coding agent that developers use to build software.
No	Core infrastructure	Judgment: a single vendor's coding agent is not software nearly every team runs.
No	Popular tool	Judgment: a newer vibe-coding agent with thousands of users is not a mainstream, widely adopted tool.
No	Exploited in the wild	Ars Technica reports new research showing leaks, not observed attacks using the flaw.
No	Public exploit	Ars Technica excerpt mentions no published exploit code or proof-of-concept.
No	Remote, no login	Ars Technica excerpt does not say the leak is reachable remotely without credentials.
No	Full takeover	Ars Technica describes data leakage, not code execution or account takeover.
Yes	Secrets exposed	Ars Technica: Grok Build leaks proprietary business information and sensitive secrets from thousands of users.
No	Supply chain	Ars Technica describes a data leak from the agent, not malicious code shipped through a trusted channel.
No	No fix yet	Ars Technica excerpt does not say whether a patch has been released.

Source

Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI ↗ AI - Ars Technica · 3h ago

First seen 3h ago · 1 source · Full story page · How tiers are decided