- Cybernews found misconfigured database in “Video AI Art Generator & Maker” app.
- The leak revealed 8.27 million media files, including 2 million private user photos and videos
- Developers secured database after publication; similar error seen in another Codeway app
Yet another misconfigured database leaking sensitive user data was found, but this one is even more worrying as the data being leaked is – user uploaded photos and videos.
Researchers from Cyber news recently discovered an Android app called “Video AI Art Generator & Maker” contained a misconfigured Google Cloud storage bucket that was accessible to anyone who knew where to look.
In total, more than 1.5 million user photos and more than 385,000 videos were stored in the bucket. Moreover, it stored more than 2.87 million AI-generated videos, more than 386,000 AI-generated audio files, and more than 2.87 million AI-generated images.
More vulnerable apps
The app offered AI-generated makeovers for photos and videos – something that’s particularly popular these days. It was launched in mid-June 2023 and according to Cyber newshas been saving the multimedia people upload since then.
So in total, the exposed bucket contained 8.27 million media files, 2 million of which were private, user-uploaded content.
The app was reportedly developed by Codeway Dijital Hizmetler Anonim Sirketi, a private company registered in Turkey, but we could not find this app on the Play Store or the developer’s official website. Codeway’s dedicated Play Store page only lists three apps.
However, the official website lists another app, called Chat & Ask AI, and this one also had a misconfigured backend using Google Firebase. In early February 2026, an independent researcher found that this app, one of the most popular in its category, revealed 300 million messages linked to 25 million users.
still, Cyber news said it managed to get in touch with the developers, who secured the Video AI Art Generator & Maker database soon after.
“This data leak shows how some AI apps prioritize quick product delivery and skip important security features, such as enabling authentication of the critical cloud storage bucket used to store user data, including images and videos,” the researchers explained.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds. Be sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, video unboxings, and get regular updates from us on WhatsApp also.
