Multiple outlets report that security researchers find large numbers of apps built with Grok’s “Grok Build” vibe-coding agent exposed online without requiring a sign-in. The exposed apps are described as accessible to anyone, and some are said to include confidential information, with certain data linked to SpaceXSI.
The coverage points to a problem where outputs from the vibe-coding tool can be inadvertently published in a way that allows data leakage. Engadget emphasizes a specific leak involving SpaceXSI user and sensitive SpaceXSI information, while The Hacker News and Ars Technica focus more broadly on the scale of exposed Grok-built apps found online by researchers.
Across outlets, the differing angles are mainly about emphasis—some lead with the most sensitive SpaceXSI-linked example, while others foreground the numbers and the methodology of scanning for publicly accessible Grok-built apps.
