- Cybernews found a misconfigured database in the “Video AI Art Generator & Maker” application
- The leak exposed 8.27 million media files, including 2 million private photos and videos of users
- The developers secured the database after disclosure; Similar crashes seen in another Codeway app
Another misconfigured database was found that leaks sensitive user data, but this one is even more worrying since the data that is leaked are photos and videos uploaded by the user.
Researchers of cyber news I recently discovered that an Android app called “Video AI Art Generator & Maker” contained a misconfigured Google Cloud storage bucket that could be accessed by anyone who knew where to look.
In total, more than 1.5 million user images and more than 385,000 videos were stored in the repository. Additionally, it stored more than 2.87 million AI-generated videos, more than 386,000 AI-generated audio files, and more than 2.87 million AI-generated images.
Several vulnerable applications
The app offered AI-generated makeovers for photos and videos, something that is particularly popular today. It was launched in mid-June 2023 and according to cyber newshas been storing the media files that people upload ever since.
So, in total, the exposed repository contained 8.27 million media files, 2 million of which were private content uploaded by the user.
The app was supposedly developed by Codeway Dijital Hizmetler Anonim Sirketi, a private company registered in Turkey, but we could not find this app on the Play Store or the developer’s official website. Codeway’s dedicated Play Store page shows only three apps.
However, the official website shows a different app, called Chat & Ask AI, and this one also had a misconfigured backend with Google Firebase. In early February 2026, an independent researcher discovered that this application, one of the most popular in its category, exposed 300 million messages linked to 25 million users.
Still, cyber news said that he managed to contact the developers, who secured the Video AI Art Generator & Maker database shortly after.
“This data breach shows how some AI applications prioritize fast delivery of products, bypassing crucial security features, such as enabling authentication for the critical cloud storage bucket used to store user data, including images and videos,” the researchers explained.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds. Be sure to click the Follow button!
And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp also.
