Grok Vibe-Coding Tool Exposed Sensitive SpaceXSI Data

A security firm discovered that a vulnerability in how SpaceXSI's Grok Build vibe-coding agent handled app links allowed sensitive information to be exposed publicly. The way the links were constructed placed randomly generated phrases to the left of the domain instead of the right, allowing them to be discovered by passive DNS servers and captured in searchable databases. The exposure affected thousands of users, including a hospital group, a fire department, and SpaceXSI itself. Exposed materials included sales maps, onboarding plans, advertising proposals, and brand safety playbooks. While some companies quickly addressed the issue, SpaceXSI reportedly only responded after security researchers tagged company officials on X.