Choose Rich Live
Tech

Grok Build coding agent leaks data across more than 35,000 apps via shareable links

A flaw in the Grok Build vibe-coding agent exposed proprietary and sensitive data across tens of thousands of applications, including confidential information belonging to SpaceXSI.

A smartphone displaying the Grok logo held in front of a SpaceX logo, featured in a graphic about a Grok coding agent data leak.
Image: @engadget

A security flaw in the Grok Build coding agent has exposed sensitive information across tens of thousands of applications through shareable links, according to reporting by Dan Goodin for Ars Technica. The leaked files include proprietary business data and confidential secrets, some of which belong to SpaceXSI.[2][4][5]

Security researcher Claroc identified 35,578 Grok Build apps that were accessible to anyone with a link. Crypto Briefing reported that the widespread leak underscores critical security vulnerabilities in AI-driven developer platforms and points to a need for stricter access controls. Engadget also noted that the vulnerability in the vibe-coding agent leaked sensitive material from thousands of users, including SpaceXSI itself.[1][3]

Key facts

  • Security researcher Claroc identified 35,578 Grok Build apps exposed to anyone with a link.
  • Grok Build leaked sensitive secrets and proprietary business data from more than 35,000 apps via shareable links, according to Ars Technica.
  • Portions of the exposed confidential information belonged to SpaceXSI, according to Ars Technica and Engadget.
  • The incident highlighted critical security gaps in AI-driven platforms requiring stricter access controls, Crypto Briefing reported.

Sources · 5 sources

  1. EN

    Engadget@engadgetPost on X ·

    A flaw in SpaceXSI’s Grok Build vibe-coding agent allowed sensitive data to leak from thousands of users including... SpaceXSI. https://t.co/MpkuOeMZdp

    Open source
  2. AT

    Ars Technica@arstechnicaPost on X ·

    Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI https://t.co/IUncezFycS

    Open source
  3. CB

    Crypto BriefingArticle ·

    Claroc finds 35,578 Grok Build apps open to anyone with a link The widespread exposure of sensitive data via Grok Build apps highlights critical security gaps in AI-driven platforms, urging stricter access controls. The post Claroc finds 35,578 Grok Build apps open to anyone with a link appeared first on Crypto Briefing .

    Open source
  4. TE

    TechmemeArticle ·

    Researchers find that Grok Build is leaking data of over 35,000 apps via shareable links, including proprietary information, some belonging to SpaceXSI (Dan Goodin/Ars Technica) Dan Goodin / Ars Technica : Researchers find that Grok Build is leaking data of over 35,000 apps via shareable links, including proprietary information, some belonging to SpaceXSI — Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive secrets …

    Open source
  5. TE

    Techmeme@TechmemePost on X ·

    Researchers find that Grok Build is leaking data of over 35,000 apps via shareable links, including proprietary information, some belonging to SpaceXSI (@dangoodin001 / Ars Technica) (Visit Techmeme dot com for the link and full context!)

    Open source