Grok Build has a security vulnerability that exposes SpaceXSI sensitive data
Cybersecurity company Claroc discovered a security vulnerability in Grok Build, an AI programming tool under SpaceXSI, leading to the leakage of sensitive data of thousands of users, including SpaceXSI's own data. Application sharing links generated by Grok, with identifiers located in the domain name, can be publicly retrieved through passive DNS services, causing information leaks from institutions such as hospitals and fire departments, where only one application was password-protected. SpaceXSI later removed 24 applications exposing internal data but did not handle other publicly accessible applications.
Same story3 other outlets also reported this
- Ars Technica · AI··First
Grok Build encoding agents leak a large amount of confidential information, some of which belongs to SpaceXSI.
- The Decoder··+15 h 40 min
Claroc claims over 35,000 Grok generative applications can be accessed without login, including patient data and plaintext passwords
Adds:ICU patient lab values and plaintext passwords
- ITHome · AI··+15 h 55 min·Reading now
Grok Build has a security vulnerability that exposes SpaceXSI sensitive data
- QbitAI··+36 h 55 min
Grok leaks its own secrets! SpaceX Tesla salary performance exposed
Adds:employee performance metrics including names, efficiency, and bonuses
In order of publication · later reports are added as they appear · Compared by AI from each outlet’s title and summary
Source: ITHome · AI · ithome.com