Most recent
navigate open esc close Corpus index built 2026-06-07 23:58 UTC

← All engagement records

Case study May 1, 2026

CEFET/RJ (Centro Federal de Educação Tecnológica Celso Suckow da Fonseca): 17-Model Brazilian Portuguese AI Stack

Sector
Universities
Country
cefet

NuClide Research · 2026-05-01


Summary

Brazil’s CEFET/RJ (Federal Center for Technological Education Celso Suckow da Fonseca) has an Ollama instance with 17 models, including custom Brazilian Portuguese fine-tunes and a 39GB DeepSeek-R1:70B local model. No authentication. Heavy emphasis on Portuguese-language AI research/coursework.


Infrastructure

FieldValue
IP200.9.149.153
OrganizationCentro Federal de Educação Tecnológica Celso Suckow da Fonseca (CEFET/RJ)
CountryBrazil
Open ports11434 (Ollama, public)

Model Inventory (17 models)

ModelSizeNotes
deepseek-r1:70b39GBLocal DeepSeek-R1 70B
RecognaNLP/chatbode:7b14GBBrazilian Portuguese chatbot (RecognaNLP, USP/UFSCar lab)
cnmoro/mistral_7b_portuguese:q2_K2GBPortuguese-fine-tuned Mistral
lukashabtoch/plutotext-r3-emotional:latest4GBCustom: “emotional text” model
lukashabtoch/moirai-agent:latest1GBCustom: agent model (likely student project)
mattw/pygmalion:latest3GBPygmalion (roleplay/chat model)
mario:latest1GBCustom small model
gemma:7b4GB,
mistral:7b4GB,
llama3.2:3b-instruct-q5_K_M2GB,
llama3.1:latest4GB,
llama2:latest3GB,
llama3-backup:latest1GB,
llama3.2:latest1GB,
tinyllama:latest,,
smollm2:135m,,
deepseek-r1:latest4GB,

Findings

F1: Unauthenticated Inference Across 17 Models (HIGH)

All 17 models accessible without authentication. The 39GB DeepSeek-R1:70B requires significant GPU resources, free inference at CEFET/RJ’s compute expense.

F2: Custom Brazilian Portuguese AI Models Exposed (HIGH)

Three custom-namespace models indicate either student/faculty research projects or coursework deployments:

  • lukashabtoch/moirai-agent, likely a student’s “Moirai” agent project
  • lukashabtoch/plutotext-r3-emotional, emotional text model (R3 = release 3)
  • mario:latest, unnamed researcher’s model

CVE-2025-63389 injection on these custom models would silently affect any student/researcher relying on their outputs.

The RecognaNLP/chatbode:7b model is the public Brazilian Portuguese ChatBode (from USP/UFSCar’s RecognaNLP group), its system prompt confirms instructional/conversational use:

“Você é assistente de IA chamado ChatBode… projetado para ser prestativo, honesto e inofensivo.”

F3: Pygmalion Roleplay Model Present (MEDIUM)

mattw/pygmalion:latest is a roleplay/character-chat model, unusual deployment on a federal educational institution server.


Remediation

OLLAMA_HOST=127.0.0.1:11434
systemctl restart ollama

Disclosure

  • Discovered: 2026-05-01
  • Status: Pending outreach to CEFET/RJ NTI (Núcleo de Tecnologia da Informação)