- Cybernews found a misconfigured database in the “Video AI Art Generator & Maker” application
- Leak exposed 8.27 million media files, including 2 million photos and videos of private users
- The developers secured the database after disclosure; Similar defects observed in another Codeway application
Another misconfigured database leaking sensitive user data has been found, but this one is even more worrying since the leaked data are photos and videos uploaded by the user.
Researchers from Cybernews recently discovered that an Android app called “Video AI Art Generator & Maker” contained a misconfigured Google Cloud storage bucket that was accessible to anyone who knew where to look.
In total, more than 1.5 million user images and more than 385,000 videos were stored in the bucket. Additionally, it has stored over 2.87 million AI-generated videos, over 386,000 AI-generated audio files, and over 2.87 million AI-generated images.
Several vulnerable applications
The app featured AI-generated makeovers for photos and videos, which is especially popular these days. It was launched in mid-June 2023 and according to Cybernewshas been storing media files uploaded by people ever since.
So, in total, the exposed bucket contained 8.27 million media files, 2 million of which were private content uploaded by users.
The app was reportedly developed by Codeway Digital Hizmetler Anonim Sirketi, a private company registered in Turkey, but we could not find this app on the Play Store or the developer’s official website. Codeway’s dedicated Play Store page only shows three apps.
However, the official site shows a different app, called Chat & Ask AI, and this one also had a poorly configured backend using Google Firebase. In early February 2026, an independent researcher discovered that this application, one of the most popular in its category, exposed 300 million messages linked to 25 million users.
Always, Cybernews said it managed to get in touch with the developers, who secured the Video AI Art Generator & Maker database shortly after.
“This data leak shows how some AI applications prioritize rapid product delivery, ignoring crucial security features, such as enabling authentication for the critical cloud storage bucket used to store user data, including images and videos,” the researchers explained.
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.
