Grok Build Left 35,000+ User Apps Exposed, Including Medical Records and SpaceX Sales Plans
Promptmethus · x · 2026-11-11
Security firm Claroc found that 35,000+ apps built on Grok Build were openly accessible, including internal apps from SpaceXSI. Exposed data reportedly includes 3,784 worker medical exams, a Tesla technician scorecard, a Navy contractor roster, and SpaceXSI's own sales plans. The flaw: each app's "secret" link token sits in the URL, which DNS logs record. Cursor claims apps are private by default, but Claroc's tests showed otherwise. SpaceXSI pulled its 24 apps only after Ars Technica asked; most other data remained exposed at publication.
More from Companies & People
- Munich hardware factory hires with no CVs — an AI agent deletes them — JensHonack · 2026-11-11
- 'Production is the moat': debating whether ASI could erase SpaceX and Tesla's IP advantage — akbirthko · 2026-11-11
- Nvidia board hires ex-prosecutor Joon Kim to investigate 'leather jacket man' — ns123abc · 2026-11-11
- Nat Lambert: Jensen Huang leaving NVIDIA CEO role would badly hurt US open models — natolambert · 2026-11-11
- The '$16 Build Your AI Lab' meme has X picking 5 researchers from tiered price list — ChrisGPT · 2026-11-11
- MLPerf at SC25: 12 university teams to run MLPerf Training in 48-hour Student Cluster Competition — TheKanter · 2026-11-11