Home ยป Database

AVID-2026-R0249

Description

Exposed ClickHouse database leaking sensitive information

Details

Wiz Research identified a publicly accessible ClickHouse database belonging to DeepSeek, exposing over a million lines of sensitive log streams, including chat history, API secrets, and backend details. The database was open and unauthenticated, allowing full control over database operations and posing significant security risks.

References

Affected or Relevant Artifacts

  • Developer: DeepSeek
  • Deployer: DeepSeek
  • Artifact Details:
TypeName
SystemDeepSeek ClickHouse Database

Impact

  • (none)

Other information

  • Report Type: Issue
  • Credits: Wiz Research
  • Date Reported: 2026-03-04
  • Version: 0.3.2
  • AVID Entry