International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 45 · Tier B5 sources

Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline

The Decoder · By Jonathan Kemper ·

Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline

The Brief · written from 5 sources

  • Security firm Claroc found 37,571 apps built with Grok Build, and 35,578 of them were open to anyone without a sign-in.
  • The apps included patient data, plaintext passwords, and confidential SpaceXSI documents, including 24 apps built by SpaceXSI and X staff.
  • The default access setting was 'Anyone with the link', which was preselected for users.

Why it matters

Apps built with Grok Build may expose sensitive data to anyone who has or finds the link, so developers using it should check their sharing settings.

Who’s affected

  • Grok Build users
  • Teams with apps built on Grok Build that use shareable links

What to do

  1. Check the access settings of Grok Build apps and restrict any set to 'Anyone with the link'.
  2. Rotate any credentials or passwords that may have been stored in apps built with Grok Build.

Security firm Claroc found more than 35,000 Grok-built apps open to anyone without login, including patient data and confidential SpaceXSI documents. The cause: "Anyone with the link" was preselected as the default access setting. SpaceXSI took only its own 24 employee apps…

Read the full story at the-decoder.com ↗

Timeline

  1. Claroc researchers report that tens of thousands of Grok Build apps are publicly accessible without sign-in

  2. AI - Ars Technica

    Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

  3. Techmeme

    Researchers find that Grok Build is leaking data of over 35,000 apps via shareable links, including proprietary information, some belonging to SpaceXSI (Dan Goodin/Ars Technica)

  4. The Hacker News

    Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

  5. Engadget - Technology News & Expert Reviews

    A Grok vibe-coding agent leaked sensitive SpaceXSI data

  6. The Decoder

    Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline

Full coverage · 5 sources

How do you feel about this?

0 Comments

    Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline – The Morning Dev