International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 45 · Tier B5 sources

A Grok vibe-coding agent leaked sensitive SpaceXSI data

Engadget · By Steve Dent ·

A Grok vibe-coding agent leaked sensitive SpaceXSI data

The Brief · written from 5 sources

  • Security firm Claroc found 37,571 apps built with Grok Build, and 35,578 of them were open to anyone without a sign-in.
  • The apps included patient data, plaintext passwords, and confidential SpaceXSI documents, including 24 apps built by SpaceXSI and X staff.
  • The default access setting was 'Anyone with the link', which was preselected for users.

Why it matters

Apps built with Grok Build may expose sensitive data to anyone who has or finds the link, so developers using it should check their sharing settings.

Who’s affected

  • Grok Build users
  • Teams with apps built on Grok Build that use shareable links

What to do

  1. Check the access settings of Grok Build apps and restrict any set to 'Anyone with the link'.
  2. Rotate any credentials or passwords that may have been stored in apps built with Grok Build.

A flaw in SpaceXSI's Grok Build vibe-coding agent allowed sensitive data to leak from thousands of users including... SpaceXSI.

Read the full story at engadget.com ↗

Timeline

  1. Claroc researchers report that tens of thousands of Grok Build apps are publicly accessible without sign-in

  2. AI - Ars Technica

    Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

  3. Techmeme

    Researchers find that Grok Build is leaking data of over 35,000 apps via shareable links, including proprietary information, some belonging to SpaceXSI (Dan Goodin/Ars Technica)

  4. The Hacker News

    Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

  5. Engadget - Technology News & Expert Reviews

    A Grok vibe-coding agent leaked sensitive SpaceXSI data

  6. The Decoder

    Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline

Full coverage · 5 sources

How do you feel about this?

0 Comments

    A Grok vibe-coding agent leaked sensitive SpaceXSI data – The Morning Dev