gcdRadar
live/Breaches & attacks/AIR-2026-1899
liveliveBreaches & attacks4 Confirmed real-world loss

Over 35,000 Grok-built Apps Exposed, Leaking Confidential Data and Passwords

Grok

Security firm Claroc discovered that 35,578 of 37,571 Grok-built applications were publicly accessible without authentication. Approximately one in ten of these apps exposed internal business information and passwords, creating a large-scale data breach.

why this severityConfirmed leakage of confidential data and passwords affecting thousands of apps

first report
11 Nov 2026
last update
11 Nov 2026

What to do

Secure the exposed applications, restrict access, and rotate any leaked credentials

Timeline · 1

  1. 11 Nov 2026Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

Sources · 1

News and write-ups

  1. 2026-11-11
    Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords
    The Hacker News · thehackernews.com/2026/11/over-35000-grok-built-apps-exposed.html

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
4 · Confirmed real-world loss
targets
xAI, Enterprise deployment
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 10 Nov 2026 · first reported 11 Nov 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-11-11 13:11Z · updated 2026-11-11 13:11Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Over 35,000 Grok-built Apps Exposed, Leaking Confidential Data and Passwords

https://gcdradar.vercel.app/incidents/over-35-000-grok-built-apps-exposed-leaking-confidential-dat · AIR-2026-1899 · live

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed leakage of confidential data and passwords affecting thousands of apps
- Fix status: No fix needed
- First reported: 2026-11-11 (happened 2026-11-10)
- AI role: No AI role
- Products: Grok

## Summary

Security firm Claroc discovered that 35,578 of 37,571 Grok-built applications were publicly accessible without authentication. Approximately one in ten of these apps exposed internal business information and passwords, creating a large-scale data breach.

## What to do

Secure the exposed applications, restrict access, and rotate any leaked credentials

## Latest updates

- 2026-11-11: Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords (https://thehackernews.com/2026/11/over-35000-grok-built-apps-exposed.html)

## Sources

- 2026-11-11 The Hacker News: Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords https://thehackernews.com/2026/11/over-35000-grok-built-apps-exposed.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
  2. live
  3. live
    AhsayCBS Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

    Breaches & attacks · Exploited · since Oct 2026 (approx.) · CVE-2026-105134, CVE-2026-105133

  4. closed
    GitHub Actions Gheist Campaign Uses Stolen GitHub Tokens to Exfiltrate Private Repository Secrets

    Breaches & attacks · Exploited · since 26 Oct 2026 · updated 28 Oct 2026

  5. live
  6. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713