原标题：Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
安全公司 Claroc 的研究显示，xAI 旗下 vibe-coding 智能体 Grok Build 的应用分享链接可被枚举，导致数千用户项目的数据泄露，包括商业计划、广告提案、体检结果和员工姓名与工号。其中有 24 个泄露应用由 SpaceXSI（SpaceX 与 xAI 合并后的实体）自己构建，内容包括机密的新员工入职计划、覆盖 594 个客户的销售区域图和内部系统地址。
安全研究指出了共享链接可被枚举这一具体设计缺陷，对使用 vibe-coding 平台的用户有直接警示意义。
本页的摘要、推荐理由与解读出自 AIsa Studio 的 AI 风向智能体，原文版权归原作者所有。
Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive secrets—from thousands of its users, including the very same Elon Musk-owned company that offers the platform, new research shows.
The information is revealed through links allowing Grok Build users to share their apps with others. Grok takes steps to randomize the URLs so only people who know the exact URL can access the data stored there. A design decision by developers of the platform, however, completely torpedoes that objective and makes it possible for anyone to enumerate thousands of live Grok Build projects. Except in rare cases, clicking those links opens the app and reveals all data associated with it.
You had one job
Research from security firm Claroc shows that the exposed data includes things like internal business plans, ad proposals, medical exam results, galley checklists from a celebrity cruise line, and employee names and ID numbers. Ironically, some of the sensitive data comes from two-dozen apps built by SpaceXSI (the name of the now-merged SpaceX and xAI) itself. A small sampling of the documents revealed in the SpaceXSI apps—Claroc found 24 of them—include an onboarding plan, marked confidential, for a new member of SpaceXSI’s enterprise sales team, a sales territory map of 594 accounts, internal system addresses for sales team tools, and advertising proposals.
Read full article
Comments
原文版权归 Ars Technica · AI 及原作者所有，本站转载仅供阅读。如需删除，请联系 support@aisa.one。
2026 年 11 月 10 日，Ars Technica 报道安全公司 Claroc 的研究发现，xAI 旗下 vibe-coding 编程智能体 Grok Build 的应用分享链接可被枚举，导致数千用户项目数据泄露，内容包括商业计划、广告提案、体检结果以及员工姓名和工号。泄露原因是分享链接虽经随机化，但一项设计决定使任何人都能枚举在线项目并查看其中全部数据。其中 24 个泄露应用由 SpaceXSI（SpaceX 与 xAI 合并后的实体）自行构建，包括标注机密的销售团队入职计划、覆盖 594 个客户的销售区域图和内部系统地址。后续报道称……The Decoder 于 11 月 11 日援引 Claroc 报告补充：在检查的 37,571 个 Grok 生成应用中，94.7%（35,578 个）无需登录即可访问，暴露内容还包括 ICU 患者化验值、3,500 余名员工名单和 18 组明文密码；泄露原因被归结为发布时默认预选“任何有链接的人”，且相关子域名可被被动 DNS 数据库检索。Claroc 表示 SpaceXSI 已下线其员工应用，但其他用户的开放应用未被处理，Claroc 正在直接通知受影响方。报道 1 称 Grok Build 属于 xAI，报道 2 称其属于合并后的 SpaceXSI 旗下，未确认归属变化的具体时间。
Studio