gcdRadar
archive/Research/AIR-2025-0191
closedclosed 14 Apr 2025Research1 Research / proof of conceptAI

GenNomis AI database exposes 100,000 synthetic and nudify images publicly

GenNomis

A security researcher identified an exposed cloud database operated by South Korean AI platform GenNomis containing roughly 100,000 files. The unprotected 47.8GB repository exposed explicit synthetic images and non-consensual deepfakes without authentication.

first report
31 Mar 2025
last update
31 Mar 2025

Timeline · 1

  1. 31 Mar 2025GenNomis AI Database Reportedly Exposes Nearly 100,000 Deepfake and Nudify Images in Public Breach

Sources · 1

Research and catalogues

  1. 2025-03-31

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Data leakInfrastructure vulnerability
severity
1 · Research / proof of concept
targets
Enterprise deployment
mitre atlas
no technique for these categories
dates
happened 31 Mar 2025 · first reported 31 Mar 2025
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# GenNomis AI database exposes 100,000 synthetic and nudify images publicly

https://gcdradar.vercel.app/incidents/gennomis-ai-database-exposes-100-000-synthetic-and-nudify-im · AIR-2025-0191 · closed 2025-04-14

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2025-03-31
- AI role: Attack on AI
- Products: GenNomis

## Summary

A security researcher identified an exposed cloud database operated by South Korean AI platform GenNomis containing roughly 100,000 files. The unprotected 47.8GB repository exposed explicit synthetic images and non-consensual deepfakes without authentication.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-03-31: GenNomis AI Database Reportedly Exposes Nearly 100,000 Deepfake and Nudify Images in Public Breach (https://incidentdatabase.ai/cite/1010)

## Sources

- 2025-03-31 AI Incident Database: GenNomis AI Database Reportedly Exposes Nearly 100,000 Deepfake and Nudify Images in Public Breach https://incidentdatabase.ai/cite/1010

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    SGLang SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents

    Breaches & attacks · Exploited · since 8 Nov 2026

    AI
  2. closed4.3
    AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access

    Patch now · Disclosed · since 28 May 2026 · CVE-2026-47713

    AI
  3. closed8.2
    Dify CVE-2026-41949: Dify authorization bypass in file preview endpoint

    Patch now · Disclosed · since 18 May 2026 · CVE-2026-41949

    AI
  4. closed
    AI
  5. closed7.5
    vLLM CVE-2025-30202: Data Exposure via ZeroMQ in Multi-Node vLLM Deployment

    Patch now · Disclosed · since 29 Apr 2025 · updated 30 Apr 2025 · CVE-2025-30202

    AI
  6. closed
    llama.cpp Misconfigured Llama.cpp Servers Expose Sensitive User Prompts

    Breaches & attacks · Exploited · since 11 Apr 2025

    AI