GoKawiilGrok Build vibe-coding tool exposed SpaceX's own internal data, researchers say
Security firm Claroc found that a flaw in xAI's Grok Build vibe-coding agent exposed sensitive data from thousands of users, including SpaceX itself, via publicly discoverable links dubbed 'GhostShares.' Leaked material reportedly included a hospital group, a fire department, and internal SpaceX documents such as sales territory maps and advertising proposals; the issue affected six other Fortune 500 companies and 26 firms with over 1,000 employees.
GoKawiil's interpretation of the reporting above, not reported fact.
The flaw stemmed from how Grok Build structured its auto-generated links, placing random identifiers in a position that passive DNS logging could capture and index publicly, unlike competing tools such as Google's Gemini. Claroc says SpaceX only acted after being publicly tagged on X, and has not addressed exposure for other affected organizations, suggesting the fix may remain incomplete across the broader user base.
- Claroc found a design flaw in Grok Build that let app links be indexed by passive DNS services, exposing private data.
- Affected organizations included SpaceX, a hospital group, a fire department, and several Fortune 500 companies.
- SpaceX removed 24 of its own exposed apps only after public pressure, but other users' exposed links reportedly remain unaddressed.
Source: engadget.com — Steve Dent, 2026-11-11
Published there as: “A Grok vibe-coding agent leaked sensitive SpaceXSI data”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.