GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections, exposing this information to interception by attackers. This vulnerability allows attackers with network access to capture highly sensitive authentication data due to lack of encryption.