35,000 Grok-built apps exposed patient data and plaintext passwords online
The security firm Claroc reported that over 35,000 apps built with Grok were reachable without login. Affected are patient data, plaintext passwords, and internal documents from SpaceXSI.
Over 35,000 apps built with Grok were reachable from the internet without login, as the security firm Claroc reported. According to the finding, the exposed applications contained, among other things, patient data, passwords in plaintext, and confidential documents and a sales pipeline of the company SpaceXSI. The information comes from reporting by The Decoder, which relies on Claroc's findings.
The analysis attributes the cause to a default setting that granted access to "anyone with the link." The app creators apparently did not change this default. Anyone who knew the link could therefore view the contents without logging in. For applications that process sensitive information, this weighs heavily, because the protection was missing from the start through the default setting rather than through a deliberate action.
According to the available information, SpaceXSI has removed only the 24 apps that came from its own employees. The remaining applications remain publicly accessible. It is therefore unclear whether the leak has been closed overall. It is also unknown how many patients are affected and whether unauthorized persons actually accessed the data.
The case highlights a weakness in applications that can be created with a few inputs and AI assistance. Those who build such apps must check access rights themselves as soon as personal or medical data is involved. Whether and when the remaining apps will be secured is not yet known.
Source: the-decoder.com
26
