# Grok Build flaw exposed 35,000 apps, including SpaceXSI business data

- URL: https://talkfuse.com/story/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/
- Published: 2026-11-10T21:12:59+00:00
- Updated: 2026-11-10T22:32:37+00:00
- Original publisher: Ars Technica
- Original article: https://arstechnica.com/security/2026/11/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/
- Topics: Software, Technology

## Key points

- Around 35,000 Grok Build apps were reportedly discoverable.
- Exposed material included confidential SpaceXSI sales documents.
- SpaceXSI removed links to its 24 identified apps.

## Summary

A security researcher found that about 35,000 apps made with SpaceXSI’s Grok Build could be accessed by people who discovered their sharing links. Although the links were intended to be difficult to guess, a flaw in the platform’s design made projects enumerable, exposing information from users’ apps. The discovery matters because the exposed material included confidential business information and personal data, including from SpaceXSI itself.

Claroc identified 24 exposed SpaceXSI apps containing material such as a confidential sales-team onboarding plan, a map covering 594 sales accounts, internal system addresses and advertising proposals. Other exposed content reportedly included medical exam results, cruise-ship checklists, employee names and ID numbers, and information linked to Fortune 500 companies and a defence contractor. After Claroc’s disclosure and questions from the article’s publisher, SpaceXSI removed links to its 24 apps; the researcher said affected organisations were being notified.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.