Grok Build coding agent leaks confidential data from thousands of users, including SpaceXSI itself
Ars Technica AI · rss · 2026-11-11
Research from security firm Claroc found Grok Build leaks confidential data via share links. Despite randomized URLs, a design flaw lets anyone enumerate thousands of live projects and view all associated data. Exposed material includes business plans, ad proposals, medical exam results, and employee records — including 24 apps built by SpaceXSI itself, with a confidential onboarding plan, a 594-account sales territory map, and internal system addresses.
More from Safety
- Ofir Press flags suspected North Korean phishing DM targeting his X account — OfirPress · 2026-11-13
- Perplexity's Decider scanned 1B tokens across 7,000 agent sessions, found 14 security fixes — denisyarats · 2026-11-13
- UK elite schools ditch laptops while poor pupils get AI chatbot tutors — AlexTensor · 2026-11-13
- Ought launches Epistemics Fund with $500k–$5M for Community Notes research — jungofthewon · 2026-11-13
- Claude nearly executes instructions read from an article, sparking injection concerns — npmer · 2026-11-13
- TSMC confirms leak of ~46K employee records offered for 3 BTC after cloud vendor breach — rohanpaul_ai · 2026-11-13