Security Research Firm: Over 35,000 Grok Apps Publicly Accessible, Exposing Corporate Secrets and Personal Privacy Data

TechFlow reported on November 12 that security research firm Claroc Research disclosed that it tested 43,551 Grok app addresses and found 37,571 still online, with 35,578 (about 94.7%) accessible without login, exposing some apps to sensitive information leakage risks.

Researchers found that 24 public apps created by Grok developers and X employees involved internal sales plans, customer profiles, and advertising proposals marked as confidential. In addition, internal data from 30 organizations appeared in public apps, including medical information, employee lists, and plaintext passwords.

Claroc noted that access permission settings for Grok apps at publication and authentication mechanisms for some AI-generated apps pose security risks. Researchers reported the issue to the relevant companies, which subsequently took down the 24 apps created by employees, but related apps created by other users have not been fully addressed.

Source: TechFlow