Get the latest tech news
Exposed DeepSeek database leaking sensitive information, including chat history
A publicly accessible database belonging to DeepSeek allowed full control over database operations, including the ability to access internal data. The exposure includes over a million lines of log streams with highly sensitive information.
As DeepSeek made waves in the AI space, the Wiz Research team set out to assess its external security posture and identify any potential vulnerabilities. This database contained a significant volume of chat history, backend data and sensitive information, including log streams, API Secrets, and operational details. Not only an attacker could retrieve sensitive logs and actual plain-text chat msgs, but they could also potentially exfiltrate plaintext passwords and local files along propriety information directly from the server using queries like: SELECT LOAD_FILE(‘{FileName}‘);
Or read this on Hacker News
