Ars Technica AI: Grok Build leaks data from thousands of projects, including SpaceXSI’s own apps

Ars Technica AI reports that security firm Claroc found Grok Build, SpaceXSI’s vibe-coding agent, leaking sensitive data from thousands of user projects. The exposed material includes proprietary business information, internal plans, medical exam results, employee names and ID numbers, and other secrets. Claroc says a design choice around shared app links lets outsiders enumerate live projects instead of keeping the randomized URLs private. The firm also found 24 SpaceXSI-built apps with exposed confidential documents.