A security firm, Claroc, has discovered that over 35,000 applications built using Elon Musk's Grok platform are accessible without login, exposing sensitive corporate and personal data. Among the leaked information are internal documents from SpaceXSI and Tesla, including employee performance reviews, customer data, and even patient medical records. The vulnerability appears to stem from Grok's default sharing settings, which allow applications to be publicly accessible via a randomly generated URL, and a flawed access control mechanism that grants access before verifying user permissions. AI
IMPACT Exposes potential security risks in AI-powered development platforms and highlights the need for robust access controls.
RANK_REASON Security vulnerability discovered in a tool built using an AI platform.
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
