Grok Build Sharing Links Public by Default, Tens of Thousands of Links Leaked Including SpaceXSI Secrets
Understand the story
On November 11, 2026, Ars Technica reported that security researcher Aprozper discovered that shared links generated by xAI's Grok Build coding agent default to 'anyone with the link' access. Using passive DNS searches, the researcher found a total of 43,601 grok.me links, of which more than 35,000 (nearly 95%) were publicly accessible. The leaked content involved users' interaction data with the agent, and some of the information belonged to SpaceXSI. At present, the disclosure has revealed the scale of the leak and the default permission settings; the report does not mention whether xAI has fixed the issue or responded.
AI overview of reporting · Updated 1 h前
Reporting timeline
Explore different aspects of the story through its reporting.
- Ars Technica · AIGrok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Security researcher Aprozper found that links generated by Grok Build default to Anyone with the link. Passive DNS searches returned 43,601 grok.me links, of which over 35,000 (nearly 95%) were publicly accessible, and some of the leaked information belonged to SpaceXSI.
Story heat trend
Not enough continuous observations to show a trend yet.