Security firm says over 35,000 Grok Build apps remain open without login
11/11/2026 — 11/13, 02:18·4 sources (all)·4 reports (all)
Key takeaways
- Security firm Claroc, in research released on 10 November, said that of 43,500 Grok Build app URLs it tested, 35,578 (94.7%) of the 37,571 s…
Background & analysis
On November 11, 2026, Ars Technica reported that a researcher had found roughly 35,000 Grok Build apps left completely open to anyone who looked for them, exposing a large volume of confidential information. The report did not specify which organizations or data categories were involved, and it did not mention any response from xAI or other parties. No further developments have been reported since, so the matter currently stands at this disclosure.
AI-generated from 1 reports · updated 3 days ago
Latest turnSecurity firm Claroc said in research published on 10 November that 35,578 of 37,571 still-live Grok Build app addresses, or 94.7%, opened without any sign-in, and about one in ten held internal business or personal data. The company behind Grok took its own 24 apps offline after the report but left other users' apps open.
Related AI tools
- Heat index
- 83
- All sources
- 4
- All reports
- 4
- First seen
- 3 days ago
Reports on this story headlines open the original
Security firm Claroc said in research published on 10 November that 35,578 of 37,571 still-live Grok Build app addresses, or 94.7%, opened without any sign-in, and about one in ten held internal business or personal data. The company behind Grok took its own 24 apps offline after the report but left other users' apps open.
The Next WebAI score 61
Security firm Claroc found more than 35,000 Grok-built apps reachable without a login, exposing patient data, plaintext passwords and SpaceXSI internal documents, The Decoder reports. The cause was the preselected "anyone with the link" sharing default, and SpaceXSI took only its own 24 employee apps offline while the rest remain accessible.
The DecoderAI score 58Researchers have found that Grok Build, a vibe-coding agent, is leaking data from more than 35,000 apps through shareable links, according to Ars Technica. The exposed material reportedly includes proprietary business information and other sensitive secrets, some of it belonging to SpaceX. The report summary does not detail the mechanism or the full set of affected apps.
TechmemeAI score 56Ars Technica reports that a security researcher found roughly 35,000 Grok Build apps left wide open to anyone who looked for them, exposing large amounts of confidential information.
Ars Technica · AIAI score 65
Other stories people are talking about
- Heat index 70Grok Bot Adds Support for Connecting Multiple Apple Apps1 sources
- Heat index 2236Nvidia stock plunges after Jensen Huang resigns, with retail investors buying the dip35 sources
- Heat index 1463RisingGoogle Opens Gemini 4 Hydrogen to All Users as High-Speed Model21 sources
- Heat index 1429SurgeJensen Huang exits as NVIDIA CEO, leadership vacuum lingers16 sources
- Heat index 785SurgeAnthropic hires gas supply lead to power data center expansion after IPO10 sources
How is heat calculated?About the methodHide
Heat counts how many independent sources covered a story in the last 48 hours: one source counts once no matter how many posts it published, decaying with a 24-hour half-life. What ranks first is what many people are talking about.
This page aggregates public feeds. Headlines and summaries are machine-organized and remain the property of the original authors; verify important facts at the source. If you believe a headline or summary infringes your rights, email the contact address in the footer with the page URL and basis of your claim, and we will remove or replace it after review.
- Surge
- Discussion rising fast
- New
- First report within 6 hours
- Rising
- Still gathering discussion