Tech

Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 10/11/2026, 22:28:24 UTC.

Briefings

Security research by Claroc revealed that Grok Build, a platform owned by SpaceXSI, leaks sensitive data from thousands of users via shareable links. The platform's design flaw allows anyone to enumerate live projects, and clicking links exposes full data including business plans, medical records, and employee IDs. Some leaked data originates from two-dozen apps built by SpaceXSI itself, with at least 24 confidential documents found in these apps.

Key points

• Grok Build leaks sensitive data from thousands of users via shareable links that are not randomized, allowing project enumeration.
• Clicking links reveals full data including business plans, medical records, and employee IDs from apps built by SpaceXSI.

Context

Grok Build is a coding agent platform owned by SpaceXSI, a merged entity of SpaceX and xAI. Security firm Claroc conducted research showing data leaks via shareable links, with at least 24 confidential documents found in SpaceXSI apps.

Limitations

Evidence is limited to a single security research report by Claroc; no independent verification or broader public impact assessment is provided.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 10/11/2026, 22:30:18 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeifp6ttawecnqrgmsyvksp2ao5im373mihikfqasf4iv3ni37ktt44