Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

Research from security firm Claroc shows that Grok Build, the vibe-coding agent from SpaceXSI, exposes proprietary business information and other sensitive secrets from thousands of users through shareable app links, because a design decision lets anyone enumerate live projects despite randomized URLs. The exposed data includes internal business plans, ad proposals, medical exam results, cruise-line galley checklists, and employee names and ID numbers, with some coming from two-dozen apps built by SpaceXSI itself, including a confidential onboarding plan, a sales territory map of 594 accounts, and internal system addresses.