GROK BUILD

Grok Build Coding Agent Exposes Sensitive User and Corporate Data

A design flaw in Grok Build's sharing mechanism allows anyone to enumerate thousands of live projects, leaking proprietary data including files from SpaceXSI.

2026-11-10

New security research from Claroc reveals that Grok Build, the vibe-coding platform, has been leaking confidential information and proprietary business assets from thousands of users.

While the platform randomizes sharing URLs, a critical design choice enables URL enumeration, exposing live projects. The compromised data encompasses internal business plans, medical records, and proprietary apps originating from SpaceXSI itself.