United StatesAnyone with a link could open 43,601 Grok Build apps.
Security firm Claroc found medical exams, a defense contractor’s roster and 24 SpaceXSI internal apps among them.
Grok Build puts the random words before the domain, so public domain-name records list every link.
Cursor says apps are private by default, but Claroc’s Asaf Aprozper found links default to anyone-with-the-link.
Claroc is notifying affected companies, and SpaceXSI has not said whether it will notify customers.
How each outlet framed it
- Ars Technica leans critical
- shows that the Grok Build share-link design lets anyone enumerate projects, and finds 24 apps built by SpaceXSI itself leaked
Sources: Ars Technica