Claroc finds thousands of Grok Build apps exposed to anyone

Grok Build, the AI coding agent from SpaceXSI, has exposed thousands of projects through shareable links, with security researchers identifying about 35,000 Grok Build apps that could be accessed by anyone who knew the exact URL. Claroc, a security firm, found that the links—intended to be easily shareable yet restricted—were effectively enumerable because the random “dice words” prefix is positioned to the left of the grok[.]me domain, allowing passive DNS services to discover them.

The result is that clicking the links often opened the app and revealed data associated with it, unless users had set the app to the more restrictive sharing option. By the time the findings were publicised, almost all data remained accessible; a later update reported that SpaceXSI began removing the links within hours of Ars Technica’s inquiry, and the 24 SpaceXSI apps were later reported as “app not found”.

Claroc’s sample of exposed material included sensitive internal documents from a range of organisations. Among the disclosures were an onboarding plan for a SpaceXSI enterprise sales recruit, a 594‑account sales territory map, internal system addresses for sales tools, and advertising proposals.

Additional examples spanned a Peruvian construction firm’s health dashboard with thousands of medical exams, a US Navy contractor’s roster of personnel, a luxury cruise line’s galley checklist listing crew by name and ID, and confidential proposals or pricing data from various other companies. Asaf Aprozper of Claroc indicated that he is notifying affected companies and collaborating with their security teams to contain the exposure.

The report notes SpaceXSI’s assertion that Grok Build apps are private by default, while testing indicated the opposite, with many apps defaulting to “anyone with the link.”