# Grok Build links exposed confidential app data, Ars reports

> A researcher found tens of thousands of Grok Build app links were accessible to anyone who had them, including links containing sensitive company information.

Oossa · 2026-11-10 · https://oossa.com/en/grok-build-links-exposed-confidential-app-data-ars-reports

Grok Build, an AI coding tool, made apps accessible to anyone with the link by default, according to tests described by Ars Technica. Security researcher Aprozper said a passive DNS search returned 43,601 links ending in grok.me. He found that more than 35,000 opened apps and their stored data without requiring an invitation.

Ars describes those public links as nearly 95 percent of the total, but the figures it gives do not match: 35,000 of 43,601 is about 80 percent. The report does not explain the difference. The exposed material included sensitive company information, some belonging to SpaceXSI, according to Ars. Anyone with a link could open its app and view the data it stored.

## The company and researcher disagree

A representative for Cursor, the AI coding service recently acquired by SpaceXSI, told Ars that Grok Build apps are private by default and only become public if their creators choose to share them. Aprozper’s tests found the opposite: the default was “Anyone with the link,” and users had to switch to “invited users” or “only you” to limit access.

The representative did not answer follow-up questions about whether SpaceXSI deliberately exposed internal information, why it removed data after Ars asked about it, or whether it would notify customers whose information may also have been exposed. The account does not say how many people viewed or downloaded the data.

## Sharing links can create similar risks

Ars says app builders including Lovable, Bolt and Replit also assign apps web addresses, which can expose those addresses through DNS records. Aprozper said Grok was where they found the most sensitive company data; the report does not say the other services use Grok’s default sharing setting.

Some other AI services structure share links differently. Claude artifacts, ChatGPT shared conversations and Gemini links put their random secret in the URL path, which DNS does not reveal. Ars advises Grok Build users to choose “invite others” unless they intend to make an app widely available.

## The facts

- Aprozper’s passive DNS search returned 43,601 links ending in grok.me.
- Ars says more than 35,000 links were public, while also describing that as nearly 95 percent; the figures do not align mathematically.
- Grok Build’s reported sharing choices were “Anyone with the link,” “invited users” and “only you.”
- A Cursor representative disputed Aprozper’s finding that anyone-with-the-link access was the default.

## Why it matters

People using Grok Build to store work information should check each app’s sharing setting and choose “invited users” or “only you” if the app is not meant for broad access. Ars reports that sensitive company information was exposed, but it does not establish how many people accessed it or whether other users’ data was affected.

## Sources & references

1. [Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI](https://arstechnica.com/security/2026/11/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/) – Ars Technica, 2026-11-10

Last updated: 2026-11-10