Shiv Nadar University: 7-Node Cluster, Chest X-Ray AI + Abliterated Models + 30+ Cloud Subscriptions

NuClide Research · 2026-05-01, Updated 2026-05-03 (session 4)

Summary

Shiv Nadar Institution of Eminence (India, Noida) runs a 7-node shared AI cluster with all nodes exposed on 0.0.0.0:11434. The cluster grew from 3 nodes (2026-05-01) → 5 nodes (2026-05-03 morning) → 7 nodes (2026-05-03 evening), all running Ollama v0.15.2. Node 2 (.37) carries active medical AI research: four lung/chest X-ray models (lungsvlm, lungslm) trained on VinDr-CXR data. All nodes share 75+ models including abliterated models, image generation, and 30+ cloud proxy subscriptions, all unauthenticated. The cluster added deepseek-v4-pro:cloud and deepseek-v4-flash:cloud (pre-release DeepSeek V4 models only available via Ollama Connect beta) and devstral-2:123b-cloud (Mistral’s latest 123B agent model).

Infrastructure

All nodes in 103.27.166.0/24 (noida.snu.in). All bind 0.0.0.0:11434, Ollama v0.15.2.

Model Scale (~75 models per node)

Notable Models on Node 2 (103.27.166.37): Medical AI Research

siddharthmalu/ is a researcher-published namespace on Ollama Hub, active Shiv Nadar researcher developing lung AI tools. These models represent active research output being served on an unauthenticated public endpoint.

Findings

F1: Medical AI Research Infrastructure Publicly Exposed (CRITICAL)

Four specialized chest X-ray / lung imaging models and three medical LLMs are served publicly without authentication. Any actor can query the research models, inject system prompts altering their diagnostic behavior, or enumerate the datasets and configurations driving the research. Research integrity is directly at risk.

F2: Pre-Release Cloud Models Accessible via Exposed Subscriptions (CRITICAL)

Nodes 4 and 5 added deepseek-v4-pro:cloud, deepseek-v4-flash:cloud, qwen3-coder-next:cloud, and devstral-2:123b-cloud, models only available through Ollama Connect beta subscriptions. Any internet actor can access these pre-release capabilities at the operator’s subscription cost.

F3: Cluster Expanded Under Active Exposure (HIGH)

The cluster grew 3 → 5 → 7 nodes across three sessions on 2026-05-03 while remaining fully unauthenticated. Infrastructure buildout continues without security posture improvement. The exposure is actively widening.

F4: Image Generation via FLUX 2 (MEDIUM)

x/flux2-klein:latest (FLUX 2 image generation) is exposed on nodes 4 and 5. Unauthenticated actors can generate images at the operator’s GPU cost. No content filtering.

F5: Abliterated + Uncensored Models on Shared Research Infrastructure (HIGH)

vishalraj/qwen3-30b-abliterated:latest and uandinotai/dolphin-uncensored:latest coexist with medical research models across all five nodes. No access control separates research use from unrestricted generation.

F6: 5-Node Model Injection Surface (CRITICAL)

CVE-2025-63389 applies to all ~75 models across all 5 nodes. A single unauthenticated /api/create POST overwrites any model’s system prompt across the cluster. Researchers running lung AI inference receive attacker-controlled output after injection.

Remediation

# Apply to all nodes (.36–.40)
OLLAMA_HOST=127.0.0.1:11434
systemctl restart ollama

Disclosure

• Discovered: 2026-05-01
• Cluster expansion observed: 2026-05-03 (3 → 5 nodes)
• Status: Pending outreach to Shiv Nadar IT Security (security@snu.edu.in)
• Disclosure email: disclosures/IN-shiv-nadar.md (needs update for 5-node scope)