- Cybernews discovered misconfigured database in “Video AI Artwork Generator & Maker” app
- Leak uncovered 8.27m media information, together with 2m personal person photographs and movies
- Builders secured database after disclosure; related flaws seen in one other Codeway app
One more misconfigured database leaking delicate person information was discovered, however this one is much more worrying for the reason that information being leaked is – user-uploaded photographs and movies.
Researchers from Cybernews not too long ago found an Android app known as “Video AI Artwork Generator & Maker” contained a misconfigured Google Cloud storage bucket which was accessible to anybody who knew the place to look.
In whole, greater than 1.5 million person pictures, and greater than 385,000 movies have been saved within the bucket. Moreover, it saved greater than 2.87 million AI-generated movies, greater than 386,000 AI-generated audio information, and greater than 2.87 million AI-generated pictures.
A number of susceptible apps
The app supplied AI-generated makeovers for photographs and movies – one thing that’s significantly in style as of late. It was launched in mid-June 2023 and in line with Cybernews, has been storing the multimedia individuals add since then.
So, in whole, the uncovered bucket contained 8.27 million media information, 2 million of which have been personal, user-uploaded content material.
The app was allegedly developed by Codeway Dijital Hizmetler Anonim Sirketi, a personal firm registered in Turkey, however we couldn’t discover this app on the Play Retailer, or the developer’s official web site. Codeway’s devoted Play Retailer web page exhibits solely three apps.
Nevertheless, the official web site does exhibit a special app, known as Chat & Ask AI, and this one additionally had a misconfigured backend utilizing Google Firebase. In early February 2026, an impartial researcher discovered that this app, probably the most in style ones in its class, uncovered 300 million messages tied to 25 million customers.
Nonetheless, Cybernews mentioned it managed to get in contact with the builders, who secured the Video AI Artwork Generator & Maker database quickly after.
“This information leak exhibits how some AI apps prioritize quick product supply, skipping essential safety features, similar to enabling authentication for the essential cloud storage bucket used to retailer person information, together with pictures and movies,” the researchers defined.
The most effective antivirus for all budgets
Comply with TechRadar on Google Information and add us as a most popular supply to get our skilled information, evaluations, and opinion in your feeds. Ensure to click on the Comply with button!
And naturally you can too comply with TechRadar on TikTok for information, evaluations, unboxings in video type, and get common updates from us on WhatsApp too.
