Grok Build Exposes Trove of Confidential Data, Including Spacexsi Info

WHO:

Ars Technica - Grok Build is a vibe-coding agent from SpaceXSI.

Ars Technica - Researchers reported the leak; the article identifies Dan Goodin as its author.

Engadget - SpaceXSI was among the users whose sensitive data was exposed.

WHAT:

Ars Technica - Researchers found that more than 35,000 Grok Build apps were exposed through shareable links.

Ars Technica - The exposed material included proprietary business information and other sensitive secrets, some belonging to SpaceXSI.

Engadget - A flaw in Grok Build allowed sensitive SpaceXSI data to leak, along with data from thousands of other users.

Ars Technica - The article described the apps as “wide open to anyone who looked for them.”

HOW:

Ars Technica - The data was accessible via shareable links.

Engadget - The leak resulted from a flaw in Grok Build.

WHY:

Engadget - The reported cause of the exposure was a flaw in the coding agent.

(UPDATED November 11, 2026 14:00 UTC)

A flaw in SpaceXSI’s Grok Build exposed more than 35,000 apps through shareable links. The apps revealed proprietary business information and sensitive secrets belonging to users, including SpaceXSI. Researchers said anyone finding the links could access the exposed material.