Claroc finds thousands of Grok Build apps exposed online

Security firm Claroc found thousands of Grok Build coding-agent applications exposed openly on the internet, with leaked data that included information belonging to SpaceXSI, and told the company about the privacy spill on Sunday. The exposure came through shared-app links. The links generally showed all data tied to a project.

SpaceXSI denotes the now-merged SpaceX and xAI. The merged company owns Grok Build, a vibe-coding agent from SpaceXSI that leaks data from thousands of projects.

Shared-app links expose information from Grok Build projects, and Grok randomizes URLs so only people with the exact URL can access stored data. A design decision by platform developers defeats that objective and lets anyone list thousands of active Grok Build projects. Those links generally open the app and show all data tied to it, except in rare cases, because the randomized URL was meant to act as access control but the design decision defeated that purpose. The root cause is a design flaw that enables enumeration of live projects.

Security firm Claroc found exposed internal business plans, ad proposals, medical exam results, galley checklists linked to a celebrity cruise line, and employee names and ID numbers. Two-dozen apps built by SpaceXSI itself exposed sensitive data. Claroc identified 24 SpaceXSI apps among exposed documents.

Documents in those apps included a confidential onboarding plan for a new sales team member at SpaceXSI, a sales territory map covering 594 accounts, internal system addresses used by sales team tools, and advertising proposals. The documents came from SpaceXSI’s own applications.

Claroc said Grok’s maker left its own internal material accessible to anyone with the link, and said it had never received the material. A Claroc official used X to tag Musk and Grok Manager Matt Palmer about the threat. The firm said in a Tuesday post that the exposure shocked it.

“The company that makes Grok had its own internal material open to anyone holding the link” Claroc said. Claroc said AI-built apps went live accessible to anyone with the link, and contrasted that with a bought tool that would sit behind company sign-in and be open only to the team. The firm compared the open deployment to a traditionally secured enterprise tool.

On Sunday, Claroc told SpaceXSI about the privacy spill. When Ars published, nearly all data was still available apart from the 24 SpaceXSI apps.

All 24 SpaceXSI apps were exposing information on Monday evening. SpaceXSI started removing links a few hours after Ars emailed questions. By publication time, all 24 app links showed an app not found error.

xAI announced Grok Build, an agentic coding command-line interface (CLI) meant for software engineering, app development, and workflow automation. SuperGrok Heavy subscribers could access Grok Build in early beta. Grok Build runs from the terminal and helps developers manage complex coding workflows using natural-language prompts.

Through subagents and plugins it enables collaboration, while drafting implementation plans, modifying files, running shell commands, and handling dependencies. Grok Build has plan-review functionality, so developers can approve or change execution steps before applying code changes. Installation is available through a single-command setup tied to SuperGrok Heavy accounts.

SpaceXAI launched Grok 4.5 on July 8, 2026, calling it its most intelligent AI model for coding and agentic tasks. Grok Build is one way to access Grok 4.5. Input tokens cost $2 per million and output tokens cost $6 per million for Grok 4.5. “It is an Opus-class model, but faster, more token-efficient and lower cost” Musk said.

SpaceX acquired xAI in February. In May, Musk said xAI would stop operating as a separate company and become SpaceXAI. The rebranding followed the acquisition. The merger created SpaceXSI.

SpaceXSI denotes the now-merged SpaceX and xAI. The name reflects the combined company behind Grok Build. SpaceX announced plans to buy Anysphere in an all-stock transaction valued at $60 billion. The deal is a related acquisition in the enterprise AI tools market.

The Artificial Analysis Coding Agent Index scored Grok Build with Grok 4.7 at 56. The score rose from 47 with Grok 4.6, both tested at the high compute tier.

DeepSWE v1.1 rose from 65% to 73%. Terminal-Bench 4.0 rose from 18% to 33%. SWE-Atlas-QnA rose from 58% to 63%. The component scores all rose with the newer model.