Grok: Over 35,000 Apps Accessible via Link, Sensitive Data Exposed

Key Takeaways

1Claroc accessed 24 internal applications from SpaceXSI and apps from other organizations via Grok links

2The addresses of Grok apps are indexed in business databases upon their first use through passive DNS queries

3Out of 43,601 collected addresses, 35,578 Grok applications were accessible to anyone with the link

Why it matters : Sensitive information from companies and organizations can be exposed if AI-generated application sharing links are not strictly controlled.

Claroc was able to access Grok applications that were published and shareable via simple links, including internal apps from organizations. The collection of passive DNS queries makes these addresses searchable in commercial indexes from their first use. The publication settings and user choices explain the extent of the phenomenon.

Confirmed Access to Internal Apps and Sensitive Data

Claroc was able to open 24 internal applications from SpaceXSI containing confidential information. The company also accessed applications from other organizations, including a hospital and Fortune 500 companies. According to Claroc, most of the applications viewed were games, homepages, or calculators. About one in ten applications contained sensitive information, internal company data, or personal data. Claroc estimates that around 2% of the opened applications contained information deemed highly sensitive or critical.

How Links Become Traceable via Passive DNS

Each published Grok application receives an address in the format <name>.grok.me. When a user opens an application, their computer queries a DNS resolver to locate this name. Passive DNS services collect these queries, either through their own resolvers or by purchasing data. From the first use of the link, the application name can be referenced in a commercial index accessible to others. Claroc specifies that it did not receive any links directly from users for its research.

Le brief IA que lisent les pros

Le brief IA que les pros lisent chaque soir

Les 7 actus IA du jour, décryptées en 5 min. Gratuit.

Inclus dès l'inscription : notre sélection des meilleurs guides & comparatifs IA.

Choisissez votre rythme

Gratuit · Pas de spam · Désabonnement en 1 clic

On the Publisher Side, Publication with Two Levels of Visibility

SpaceXSI reportedly indicated that applications created with Grok remain private until they are published, and this operation is not considered a bug. Upon publication, the user goes through several steps and chooses between two visibility options: either the application is only accessible to its creator, even if the link circulates, or it can be opened by anyone with the link. In October, Claroc had already observed applications generated by Meta's Muse accessible via link, an issue that Meta has since corrected.

Tens of Thousands of Addresses, a Large Portion Accessible

Claroc identified over 35,000 Grok applications accessible to anyone who knows their address. The majority of users seem to choose the option that allows access to those with the link. Out of 43,601 identified Grok application addresses, 35,578 were able to be opened. Generative AI models allow for the creation of customized applications, but a shared link can become traceable by third parties, and some of these applications contain confidential information.