{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "DeepSeek leaves ClickHouse database open: chat logs and API keys exposed · updates",
  "home_page_url": "https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025",
  "feed_url": "https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025/feed.json",
  "description": "Wiz found two DeepSeek ClickHouse instances open to the internet without authentication. Its query interface allowed arbitrary SQL and exposed a log_stream table with over a million entries, including plaintext chat history, API keys and backend details. DeepSeek locked it down within an hour of being told.",
  "language": "en",
  "_pwn": {
    "slug": "deepseek-exposed-clickhouse-database-january-2025",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025/feed.xml",
    "llms": "https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025/llms.txt",
    "json": "https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025#2025-01-29-4cbc08a3",
      "url": "https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025#2025-01-29-4cbc08a3",
      "title": "DeepSeek leaves ClickHouse database open: chat logs and API keys exposed: Wiz finds the exposed database and reports it; DeepSeek secures it within an hour",
      "content_text": "DeepSeek leaves ClickHouse database open: chat logs and API keys exposed: Wiz finds the exposed database and reports it; DeepSeek secures it within an hour\n\nSource: https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak",
      "date_published": "2025-01-29T00:00:00.000Z",
      "external_url": "https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak",
      "tags": [
        "high"
      ]
    }
  ]
}