Researchers from Wiz Research have discovered an open database (ClickHouse public database) online containing a million rows of sensitive information from the Chinese AI assistant DeepSeek. Inside the database are unencrypted user chats, secret keys, logs, backend, and server data. All of this was stored without the necessary protection.
“After a simple reconnaissance of the public infrastructure of DeepSeek, we discovered a public ClickHouse database that was completely open and did not require any authentication. This meant that anyone could access logs containing real chat messages, internal secrets, service data, and potentially extract data along with privilege escalation on the server. As soon as we discovered the vulnerability, we immediately reported it to the DeepSeek team. The company’s employees immediately restricted access to the database and removed the database from the Internet,” Wiz Research explained
. Wiz said in a statement that the ClickHouse database was hosted at oauth2callback.deepseek.com:9000 and dev.deepseek.com:9000. It was completely open source and exposed sensitive data. Wiz has been in the information security market since 2020. It specializes in identifying security risks for various cloud services. DeepSeek is based in Hangzhou and makes it clear in its privacy policy that the personal and system information that the company's service collects from users is stored "on secure servers located in China." According to DeepSeek Privacy Policy and Terms of Use , the AI service collects , stores, and processes user data on its servers, including IP addresses, user agent, keystroke patterns, device information, cookies, crash reports and performance logs, operating system, keystroke patterns or rhythms, and system language. Deleting a user account does not erase at least some of this data. @ Habr
