Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History

Wiz Research discovered an unauthenticated, publicly accessible ClickHouse instance for DeepSeek (hosts on ports 8123 and 9000) containing over one million log entries with plaintext chat history, API secrets, backend and operational metadata; the exposure allowed arbitrary SQL execution and potential full database control and privilege escalation. Wiz responsibly disclosed the issue to DeepSeek, which remediated the exposure, and the report warns of broader AI industry risks from rapid adoption without adequate infrastructure security.