DeepSeek leaves ClickHouse database open: chat logs and API keys exposed ยท updates https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025 Wiz found two DeepSeek ClickHouse instances open to the internet without authentication. Its query interface allowed arbitrary SQL and exposed a log_stream table with over a million entries, including plaintext chat history, API keys and backend details. DeepSeek locked it down within an hour of being told. en Wed, 29 Jan 2025 00:00:00 GMT DeepSeek leaves ClickHouse database open: chat logs and API keys exposed: Wiz finds the exposed database and reports it; DeepSeek secures it within an hour https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025 https://pwn.watch/i/deepseek-exposed-clickhouse-database-january-2025#2025-01-29-4cbc08a3 Wed, 29 Jan 2025 00:00:00 GMT high <p><a href="https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak">Source</a></p>