Claroc Finds 35,578 Grok Build App Addresses Accessible Without Sign-In

Security firm Claroc found that 35,578 of 37,571 Grok Build app addresses still online opened without sign-in, identifying a potential data exposure issue in SpaceXSI's AI development tool.

Claroc tested 43,551 addresses. Of those, 37,571 remained online, and 35,578 — 94.7% of the online group — could be opened without authentication. The percentage applies only to addresses that remained online.

Claroc notified SpaceXSI on Nov. 8 and 9. After the notice, 24 apps created by SpaceXSI and X employees were removed. No subsequent handling of public apps created by other users had been announced.

SpaceXSI said apps remain private until creators choose to share them, publishing takes several steps and employee accounts default to private.