A security vulnerability in the SpaceXSI Grok Build coding agent has leaked confidential user data and internal company records, prompting renewed worry regarding the security of AI-driven development software.
Cybersecurity organization Claroc uncovered the flaw, revealing that thousands of programs built with Grok Build were accessible to unauthorized individuals. The compromised data featured sensitive internal business files, staff information, and proprietary material belonging directly to SpaceXSI.
Researchers explained that the flaw stemmed from how Grok Build created shareable URLs. Although these links appeared complex and difficult to guess, their architecture made them discoverable via public DNS tracking systems, enabling outside parties to locate applications without a direct invite.
What Information was Exposed?
Claroc identified 24 SpaceXSI employee-built applications that were accessible via these URLs. The leaked contents comprised a staff onboarding guide, a sales territory map detailing 594 strategic accounts, eight X advertising pitches, and four active advertiser account boards.
Also Read: Tech Mahindra and SpaceXSI Join Hands to Modernize Enterprise Software
Investigators likewise uncovered two versions of an internal X brand safety manual. Certain files held data that typically stays restricted to internal employees and commercial departments.
The issue extended beyond SpaceXSI. Claroc reported that software belonging to a fire department, a hospital network, and numerous major businesses was likewise compromised. Among the impacted entities, six were Fortune 500 corporations and 26 had workforces exceeding 1,000 employees.
SpaceXSI Removes its Internal Applications
Claroc noted that Grok Build inserted randomly generated four-word identifiers ahead of the primary domain name, which exposed the links to passive DNS logs that track and index domain lookups.
Also Read: SpaceXSI Subscription: Musk Unifies Grok, X, Cursor in a Single Bundle
The security company disclosed its discovery to SpaceXSI and the other impacted parties. SpaceXSI ultimately deleted its 24 internal applications after Claroc mentioned Elon Musk and an additional company representative on X. Nevertheless, Claroc stated that the firm had not taken comparable measures for applications built by external users and enterprises.
This event underscores a vulnerability tied to artificial intelligence coding assistants capable of generating and deploying applications with minimal technical oversight. Although these platforms simplify software creation, misconfigured sharing permissions can inadvertently publish private data.
