Vyro AI's image apps streamed prompts and login tokens from an open server
What happened
Cybernews researchers found an unprotected Elasticsearch server run by Vyro AI, maker of ImagineArt, Chatly and Chatbotx, leaking 116 GB of live user logs including prompts and login tokens. Search engines for internet-connected devices had indexed it since mid-February, so it may have been visible for months.
Vyro AI, a Pakistan-based developer, makes popular consumer AI apps including the image generator ImagineArt, with more than 10 million downloads, and the chatbots Chatly and Chatbotx. Cybernews researchers found one of its Elasticsearch servers open to the internet with no password, holding about 116 GB of live logs from production and development systems. The logs captured the prompts users typed, which can be very personal, along with the bearer tokens that keep users logged in, which could let someone hijack accounts and view their chat histories and generated images. Search engines that index internet-connected devices had listed the server since mid-February 2025, so it may have been visible to others for months before the researchers found it.
How it happened
Leaky AI product: Exposed datastore. A database, storage bucket or server behind an AI product was left open on the internet without a password.
Sources do not say whose AI model was involved. The product was ImagineArt, Chatly, a type of AI-powered app.
Impact
Data was exposed. Data involved: chat logs and credentials. The impact was confined to one organization and its users or customers.
Severity is rated High, calculated from how far the incident reached and how sensitive the data was.
Was the AI at fault?
No. The failure was in the systems, settings or people around the AI, not in the model's behaviour.
Status and timeline
Confirmed by the affected organization, the AI vendor, a regulator or a named security research firm.
It became public on 11 Sep 2025.
Cybernews reported the exposure to Vyro AI and published its findings on 11 September 2025.