Security firm Claroc finds exposed internal business plans in Grok Build
Security firm Claroc found Grok Build leaks internal business plans, ad proposals, and medical exam results. The platform's URL randomization fails, allowing enumeration of thousands of projects.
- Field
- computer security
- What they did
- Research shows that Grok Build, a coding agent from SpaceXSI, leaks confidential user data, including internal business plans and medical results, through app sharing links.
- Why it matters
- The developers' design decision to randomize URLs failed to prevent anyone from enumerating and accessing thousands of live projects.
#llm#security#privacy#spacex#coding agent



