Apps that people build by chatting with Grok can leak private data when they are shared too widely, research by security firm Claroc suggests. Claroc tried 43,551 addresses of apps published from Grok’s Build mode. Of the 37,571 still online, 35,578, or 94.7%, opened for anyone without signing in.
Most were games, landing pages and other harmless projects. But Claroc estimates that roughly 650 to 800 held private data. Among those it confirmed by hand were a hospital group’s staff list, an intensive care patient’s lab results and a timesheet that gave out employees’ passwords. Twenty-four of the open apps were built by staff at SpaceXSI and X.
Nothing went public until a creator pressed Publish. Claroc’s complaint is that, in the account it used, the publish panel proposed “Anyone with the link” as the access setting. SpaceXSI, responding for Grok, told a reporter that apps are private until their creator chooses to share one and that employee accounts default to “Only you”. It took down the 24 apps its own staff had built, but Claroc says the apps of other users were left up, and it has begun notifying their owners itself.
If you publish apps made with an AI builder, set anything holding real data to “Only you” or invited users, and test the link from a signed-out browser.
Source: Claroc research report