aichannel

What were you asking DeepSeek about, chat?

🔍 How did we find it?

Following a simple recon on DeepSeek's public infrastructure, we discovered a publicly exposed ClickHouse database that was completely open and required no authentication at all.

This meant anyone could access logs containing actual chat messages, internal secrets, service data, and potentially exfiltrate data along with escalating privileges within the server.

What were you asking DeepSeek about, chat? https://x.com/wiz_io/status/1884707819737223591