# Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

Source: [The Hacker News](https://thehackernews.com/2026/11/over-35000-grok-built-apps-exposed.html) · 2026-11-11 · Security
Page: https://themorning.dev/story/over-35-000-grok-built-apps-exposed-online-some-leaking-confidential-data-and-pa-14caa111eec698f5
Kind: security · Impact: high

## In brief

- Security firm Claroc found 37,571 apps built with Grok Build, and 35,578 of them were open to anyone without a sign-in.
- The apps included patient data, plaintext passwords, and confidential SpaceXSI documents, including 24 apps built by SpaceXSI and X staff.
- The default access setting was 'Anyone with the link', which was preselected for users.

## Why it matters

Apps built with Grok Build may expose sensitive data to anyone who has or finds the link, so developers using it should check their sharing settings.

## What to do

- Check the access settings of Grok Build apps and restrict any set to 'Anyone with the link'.
- Rotate any credentials or passwords that may have been stored in apps built with Grok Build.

## Timeline

- 2026-11-10: Claroc researchers report that tens of thousands of Grok Build apps are publicly accessible without sign-in

## Coverage

- [Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline](https://the-decoder.com/grok-built-apps-exposed-patient-data-plaintext-passwords-and-spacexsis-own-sales-pipeline/) — The Decoder, 2026-11-11
- [A Grok vibe-coding agent leaked sensitive SpaceXSI data](https://www.engadget.com/2313187/grok-build-leaked-sensitive-spacexsi-data/) — Engadget - Technology News & Expert Reviews, 2026-11-11
- [Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords](https://thehackernews.com/2026/11/over-35000-grok-built-apps-exposed.html) — The Hacker News, 2026-11-11
- [Researchers find that Grok Build is leaking data of over 35,000 apps via shareable links, including proprietary information, some belonging to SpaceXSI (Dan Goodin/Ars Technica)](https://www.techmeme.com/261111/p3#a261111p3) — Techmeme, 2026-11-11
- [Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI](https://arstechnica.com/security/2026/11/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/) — AI - Ars Technica, 2026-11-10

Tags: grok-build, data-leak, misconfiguration, security, vibe-coding

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev