IncidentsMore than 35,000 Grok-built apps found open to anyone online
Security firm Claroc says most apps made with xAI's Grok app builder sit on the public internet with no sign-in, and roughly one in ten expose internal data.
11 Nov 2026
35,000+ Grok-built apps left exposed online, some leaking secrets
Security firm Claroc found 37,571 apps built using Grok's app-building feature, of which 35,578 were publicly accessible without authentication; about one in ten contained internal business data or passwords, including apps built by staff at X and SpaceX.
Disclosed 10 November 2026 · Record updated 11 November 2026
Impact
Tens of thousands of Grok-generated apps were left open to the public without sign-in, with roughly 10% exposing internal business information or credentials such as passwords.
Our coverage
IncidentsSources
- thehackernews.comhttps://thehackernews.com/2026/11/over-35000-grok-built-apps-exposed.html