- Cybernews discovered misconfigured database in “Video AI Artwork Generator & Maker” app
- Leak uncovered 8.27m media recordsdata, together with 2m non-public person pictures and movies
- Builders secured database after disclosure; related flaws seen in one other Codeway app
One more misconfigured database leaking delicate person information was discovered, however this one is much more worrying because the information being leaked is – user-uploaded pictures and movies.
Researchers from Cybernews just lately found an Android app known as “Video AI Artwork Generator & Maker” contained a misconfigured Google Cloud storage bucket which was accessible to anybody who knew the place to look.
In whole, greater than 1.5 million person photos, and greater than 385,000 movies had been saved within the bucket. Moreover, it saved greater than 2.87 million AI-generated movies, greater than 386,000 AI-generated audio recordsdata, and greater than 2.87 million AI-generated photos.
A number of weak apps
The app provided AI-generated makeovers for pictures and movies – one thing that’s significantly in style nowadays. It was launched in mid-June 2023 and in response to Cybernews, has been storing the multimedia folks add since then.
So, in whole, the uncovered bucket contained 8.27 million media recordsdata, 2 million of which had been non-public, user-uploaded content material.
The app was allegedly developed by Codeway Dijital Hizmetler Anonim Sirketi, a non-public firm registered in Turkey, however we couldn’t discover this app on the Play Retailer, or the developer’s official web site. Codeway’s devoted Play Retailer web page reveals solely three apps.
Nonetheless, the official web site does exhibit a special app, known as Chat & Ask AI, and this one additionally had a misconfigured backend utilizing Google Firebase. In early February 2026, an impartial researcher discovered that this app, one of the vital in style ones in its class, uncovered 300 million messages tied to 25 million customers.
Nonetheless, Cybernews mentioned it managed to get in contact with the builders, who secured the Video AI Artwork Generator & Maker database quickly after.
“This information leak reveals how some AI apps prioritize quick product supply, skipping essential security measures, resembling enabling authentication for the vital cloud storage bucket used to retailer person information, together with photos and movies,” the researchers defined.
The most effective antivirus for all budgets
Observe TechRadar on Google Information and add us as a most popular supply to get our professional information, critiques, and opinion in your feeds. Make sure that to click on the Observe button!
And naturally you too can comply with TechRadar on TikTok for information, critiques, unboxings in video kind, and get common updates from us on WhatsApp too.
