The way Grok handles links to apps allowed them to be exposed publicly.
By Steve Dent Nov. 11, 2026 7:35 am EST Cheng Xin/Getty Images Add Engadget on Google: Google DiscoverA flaw in SpaceXSI's Grok Build vibe-coding agent allowed sensitive data to leak from thousands of users including... SpaceXSI, security fraud firm Claroc told Ars Technica. The way Grok handles links to apps allowed them to be exposed publicly by certain types of DNS services, according to the security team. As a result, sensitive information involving employees was leaked out from a hospital group, a fire department and SpaceXSI itself.
