Grok Build Apps Leak Sensitive Data: 35,000 Exposed

A critical design flaw in SpaceXSI's Grok Build AI platform has led to the exposure of sensitive data from an estimated 35,000 apps. Security researchers at Claroc discovered that a method for sharing apps inadvertently made them publicly accessible, compromising confidential business plans, medical exam results, and employee identification details. This vulnerability affected numerous users, including SpaceXSI itself, which had 24 internal applications exposed.

The issue stemmed from how Grok Build generates shareable links. Unlike secure methods where random elements are part of the URL's path, Grok Build placed them at the beginning of the domain, allowing passive DNS services to easily enumerate live projects. Claroc found that nearly 95% of discovered Grok Build links led to publicly accessible applications.

Some of the exposed data included a Peruvian construction company's occupational health dashboard with 3,784 medical exams, Tesla's service center scorecards, and a luxury cruise line's galley checklist with crew details. Following the discovery, SpaceXSI began removing the links to its own exposed apps. Users of Grok Build are advised to select more restrictive sharing options to prevent further data exposure.