Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

Security researchers found that thousands of apps created with SpaceXSI's Grok Build coding agent exposed sensitive internal data, including proprietary business information from SpaceXSI and other companies. The exposure stems from a design implementation where randomly generated access tokens are placed to the left of the domain, allowing the links to be easily enumerated through passive DNS services. SpaceXSI removed the links for its own apps after being contacted by researchers, while a company representative defended the platform by stating apps are private by default. Open article →