[Over 35,600 Grok Apps Found to Have Public Access Vulnerabilities, Leading to Data Breach] Security research firm Claroc Research examined 43,551,000 Grok app addresses and found that 37,571,000 were still online, and 35,578,000 were accessible without login. Some of these apps posed a risk of sensitive information leakage.
Researchers discovered that 24 public apps created by Grok developers and X employees contained internal sales plans, customer data, and advertising proposals marked as confidential. In addition, internal data from 30 other organizations appeared in the public apps, including medical information, employee lists, and plaintext passwords.
Claroc pointed out that the access permission settings when Grok apps were released and the authentication mechanisms of some AI-generated apps had security vulnerabilities. Researchers have reported the issues to the relevant companies, and the companies involved have taken down the 24 employee-created apps, but other users' related apps have not yet been fully addressed.
