Wiz Finds Exposed DeepSeek Database Containing Chat History and Secrets
Summary
Wiz found an unauthenticated DeepSeek ClickHouse database exposing over a million log entries, including chat history and secrets. Wiz disclosed the exposure, and DeepSeek secured it.
Key points
- Wiz identified publicly accessible ClickHouse databases on oauth2callback[.]deepseek[.]com and dev[.]deepseek[.]com, with no authentication.
- The researchers found more than one million log entries, including plaintext chat history, API keys, backend details, and operational metadata.
- The exposed database allowed SQL queries through ClickHouse’s HTTP interface; Wiz says it did not run intrusive queries.
- Wiz said the access could have enabled retrieval of sensitive logs and potentially other server data, depending on database configuration.
- Wiz responsibly disclosed the exposure to DeepSeek, which promptly secured it.
Article Details
- Victim Organization
- DeepSeek
- Victim Domain
- deepseek.com
- Incident Type
- Public exposure of an unauthenticated ClickHouse database
- Data Types Exposed
- Chat history
- API secrets and keys
- Backend details
- Operational metadata
- Directory structures
- Affected Records
- Over 1 million log entries
- Operational Impact
- The database was publicly accessible and allowed full database control, including access to sensitive logs. DeepSeek secured the exposure after Wiz Research disclosed it. Wiz Research said it did not execute intrusive queries beyond enumeration.
- Claim Status
- confirmed
Products
ClickHouseWiz Research has identified a publicly accessible ClickHouse database belonging to DeepSeek, which allows full control over database operations, including the ability to access internal data. The exposure includes overDeepSeek-R1recently garnered significant media attention due to its groundbreaking AI models, particularly the DeepSeek-R1 reasoning model. This model rivals leading AI systems like OpenAI’s o1 in performance and stands out