Skip to main content
cve.nowby Sazabi
Menu
Early warnings

Early warning

Claroc reports 35,000+ open Grok-built apps, some leaking data and passwords

Security firm Claroc says 35,578 of 37,571 Grok-built apps it found online were open without sign-in. Per the report, about 1 in 10 of the open apps contained internal business data, and 24 apps were built by staff at X and SpaceXSI.

SZB-d12fff21cbBreachCorroborated

Written by a model from the sources below. Verify against them.

Sources3Corroborated
Kind
Breach
Vendor
SpaceXSI
Product
Grok Build
Status
Corroborated
First seen

What to do

  • Check whether any apps built with Grok are publicly reachable and require sign-in

  • Rotate any passwords or API keys that may have been stored in Grok-built apps

  • Restrict access to internal business data in any exposed app

Timeline

  1. Made public by Mastodon
  2. First seen by cve.now1 day
  3. Record last updated

Evidence 3

  1. Social
    Mastodon
    “Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive secrets—from thousands of its users”
  2. Press
    The Hacker News
    “Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday.”
  3. Social
    Mastodon
    “35,578 AI-built applications exposed to the public internet.”
    +1 more: Mastodon

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.

Questions about SZB-d12fff21cb

Was SpaceXSI breached?

Mastodon, The Hacker News and Mastodon report it. No statement from SpaceXSI has reached cve.now yet.Source: Mastodon, The Hacker News, Mastodon

What should SpaceXSI users do?

Check whether any apps built with Grok are publicly reachable and require sign-in. Rotate any passwords or API keys that may have been stored in Grok-built apps. Restrict access to internal business data in any exposed app.

Sources