SpaceXSI coding tool exposes confidential business and personal data across thousands of apps

Traders Union
All News
Business & Wealth
Companies
SpaceXSI coding tool data leak

Highlights

Claroc discovered a security flaw in SpaceXSI's Grok Build links that exposes confidential business and personal data from thousands of active projects.
Exposed data includes internal SpaceXSI business plans, medical exam records, employee IDs, and sales data for 24 apps, with some links removed after disclosure.
Claroc identified affected organizations including Tesla, the U.S. Navy, a healthcare provider, and a cruise operator, with over 3,784 medical exams and 4,000 vehicle-transport orders leaked.

Security flaw in Grok Build links

As reported by Ars Technica, research from security firm Claroc shows that Grok Build apps can be discovered and opened through a weakness in how SpaceXSI structures shared links. The issue affects links meant to let users quickly distribute apps for testing or internal use, but in most cases those links also reveal the full data stored in the apps.

Grok Build uses randomized phrases in shared URLs to make them hard to guess. Claroc says that protection is undermined because the random elements are placed to the left of the grok.me domain rather than to the right, making the links enumerable through passive DNS services. The researchers say that, instead of limiting access to people with the exact URL, the design makes it possible for others to locate thousands of active projects.

Claroc says the exposed information includes internal business plans, advertising proposals, medical exam records, employee names and ID numbers, and other confidential operational material. The firm says 24 exposed apps belonged to SpaceXSI and included a confidential onboarding plan for an enterprise sales hire, a sales territory map covering 594 accounts, internal system addresses, and ad proposals.

In a Tuesday post, Claroc says SpaceXSI started removing the links within hours after receiving questions sent for the article. By the time the post goes live, the 24 SpaceXSI app links return an "app not found" error, although Claroc says most other exposed data remains accessible at that point.

Corporate and sector risks widen

Claroc says the exposed apps affect organizations including a Peruvian construction company, Tesla, a U.S. Navy ship engineering contractor, a luxury cruise operator, a healthcare company, a U.S. IT services provider, a Nordic aerospace and defense group, a U.S. homebuilder, a Malaysian holding company, an auto transport company, and a U.S. data center and hosting provider.

The leaked records described by the researchers include 3,784 worker medical exams, a service-center scorecard naming 22 Tesla technicians, a roster of 108 people tied to a Navy logistics support contract, a hospital staff list with about 3,565 employees, and about 4,000 vehicle-transport orders with prices and margins. Claroc co-founder and CTO Asaf Aprozper says he is notifying affected companies, and says a luxury cruise company mobilized its security team immediately after receiving the findings.

The incident highlights the business risk created when AI-generated internal tools are deployed through convenience-first sharing features without conventional access controls. Claroc says that if comparable software had been purchased through standard enterprise channels, it likely would have sat behind company sign-in rather than being reachable through share links alone.

Previously, we highlighted SpaceX’s Grok reimbursement pledge for user losses tied to Grok purchase mistakes or card-data leaks.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.