Case vyro-ai-elasticsearch-leakModel & data leakPakistan
Vyro AI leaves 116GB of ImagineArt and Chatly prompts and tokens on open Elasticsearch
Cybernews found an unauthenticated Elasticsearch server belonging to Vyro AI streaming about 116GB of live logs with user prompts, bearer tokens and user agents from apps with over 10 million downloads.
HighAttack on AIStatus: ResolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Sep 10, 2025
- Location
- Pakistan
- Target
- Vyro AI (ImagineArt, Chatly, Chatbotx apps)
- Severity
- High
- Triggered by
- Misconfiguration by Vyro AI; found by Cybernews
- Actor type
- Accidental / misconfiguration
- Reported loss
- None reported
- CVE
- None
What happened
Cybernews found an unauthenticated Elasticsearch server belonging to Vyro AI streaming about 116GB of live logs with user prompts, bearer tokens and user agents from apps with over 10 million downloads.
Impact: Bearer tokens could enable account hijacking and fraudulent purchases; prompts may include private content
Who triggered it
Actor: Misconfiguration by Vyro AI; found by Cybernews
Attribution: Discovered by Cybernews researchers during internet scanning
Motive: None (accidental exposure)
How it happened
Attack vector: Elasticsearch instance exposed with no authentication or network restriction
Root cause: Logging pipeline written to a public database; sensitive tokens stored in logs
Timeline
- Instance first indexed by IoT search engines
- Cybernews discovers the exposure
- Public disclosure
Response
Server secured after disclosure; no public statement from Vyro found
Current status: Resolved
Sources (open in a new tab)
- Malwarebytes malwarebytes.com
- Daily Security Review dailysecurityreview.com
Cite this case
Vyro AI leaves 116GB of ImagineArt and Chatly prompts and tokens on open Elasticsearch. AI Threat Watch, case vyro-ai-elasticsearch-leak, Sep 10, 2025. https://aithreat.io/cases/vyro-ai-elasticsearch-leak/
Permanent link: https://aithreat.io/cases/vyro-ai-elasticsearch-leak/