Grok Build, xAI's coding agent platform, suffers a severe information disclosure vulnerability that exposes confidential user data—including proprietary business plans, internal addresses, and employee details—from thousands of projects via link enumeration. Notably, 24 leaked apps belong to xAI itself (the merged SpaceX/xAI entity), containing its own internal sales materials and onboarding documents.
Background
xAI is Elon Musk's AI company, recently merged with SpaceX into an entity referred to as SpaceXSI. The incident was discovered by security firm Claroc through systematic URL enumeration of the Grok Build platform.
- Source
- Ars Technica
- Published
- Nov 11, 2026 at 05:12 AM
- Score
- 8.0 / 10