Vyro AI's image apps streamed prompts and login tokens from an open server
Cybernews researchers found an unprotected Elasticsearch server run by Vyro AI, maker of ImagineArt and other consumer AI apps, leaking user prompts and authentication tokens in real time. Search engines had indexed the server months earlier.
- Disclosed
- Sep 2025
- Organization
- Vyro AI
- Vendor
- Unknown
- Product
- ImagineArt, Chatly
- Kind of AI
- AI app
- AI's role
- AI was the target
- How it happened
- Leaky AI product: Exposed datastore
- Harm
- Data exposed
- Data involved
- Chat logs, Credentials
- Reach
- One organization
- Severity
- High
- Model at fault
- No
- Status
- Confirmed