Security · High impactFan score 45 · Tier B5 sources

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

The Hacker News · 1h ago

The Brief · written from 5 sources

Security firm Claroc found 37,571 apps built with Grok Build, and 35,578 of them were open to anyone without a sign-in.
The apps included patient data, plaintext passwords, and confidential SpaceXSI documents, including 24 apps built by SpaceXSI and X staff.
The default access setting was 'Anyone with the link', which was preselected for users.

Why it matters

Apps built with Grok Build may expose sensitive data to anyone who has or finds the link, so developers using it should check their sharing settings.

Who’s affected

Grok Build users
Teams with apps built on Grok Build that use shareable links

What to do

Check the access settings of Grok Build apps and restrict any set to 'Anyone with the link'.
Rotate any credentials or passwords that may have been stored in apps built with Grok Build.

#grok-build
#data-leak
#misconfiguration
#security
#vibe-coding

Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday. They included 24 apps built by staff at the social network X and at SpaceXSI, the company that makes the Grok AI assistant. Most…

Read the full story at thehackernews.com ↗