Grok-built apps leak data at scale
Understand the story
Security firm Claroc has found a large-scale data leak issue with Grok-built apps. Of the 37,571 online apps published via Grok Build, 35,578 (about 94.7%) could be accessed by anyone without logging in. Leaked content included patient data and internal documents from SpaceXSI. The leak stems from two causes: first, when apps were published, "anyone with the link" was preselected as the default access setting; second, each app's subdomain ends up in retrievable passive DNS databases, meaning the apps can be discovered externally even if never actively shared. The finding was reported by The Decoder on November 11, 2026, and no response or fix from xAI has been seen yet.
AI overview of reporting · Updated 2 h前
Reporting timeline
Explore different aspects of the story through its reporting.
- The DecoderGrok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline
Security firm Claroc found that 35,578 of 37,571 online apps built with Grok (94.7%) were accessible without login, because "anyone with the link" was preselected as the default at publish time, and each app's subdomain ended up in passively retrievable passive DNS databases.
Story heat trend
Not enough continuous observations to show a trend yet.