Thousands of Grok-built apps were public without sign-in
Original title: Grok’s security blind spot exposed users and Musk’s company secrets
Claroc found 35,578 of 37,571 active grok.me apps open to anyone, and about one in 10 held sensitive data.
Claroc researchers examined 43,551 web addresses under the grok.me domain and found that 35,578 of 37,571 active apps built with Elon Musk’s AI assistant Grok were reachable without a sign-in. The researchers reported that about one in 10 of those public apps contained sensitive personal information or internal business data. The exposure covers both users and company secrets, according to the report summarized by DataBreaches.net.
Unconfirmed: The share of apps holding sensitive data is an approximate figure from Claroc.
- Claroc reviewed 43,551 addresses under the grok.me domain.
- 35,578 of 37,571 active Grok-built apps required no sign-in.
- About one in 10 public apps held personal or business data.
Impact: Personal data and internal business information left publicly reachable
| Product | Affected |
|---|---|
| Grok apps on grok.me | — |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | grok.me | Claroc researchers examined 43,551 web addresses under the grok.me domain. The investigation revealed that 35,578 out of 37,57 |
From the original article
2 min read at databreaches.netPaulina Okunytė reports: More than 35,000 apps created with Elon Musk’s AI assistant Grok were accessible to anyone on the internet, exposing corporate secrets and sensitive personal data, security researchers find. […] Claroc researchers examined 43,551 web addresses under the grok.
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.