In a recent discovery, Wiz Research uncovered a significant security lapse at DeepSeek, a rising AI startup known for its cost-effective and efficient AI models. A publicly accessible ClickHouse database belonging to DeepSeek was found to be exposing sensitive information and allowing full control over database operations. This incident highlights the critical need for robust security measures within the rapidly evolving AI landscape.
The Wiz Research team, while assessing DeepSeek's external security posture, quickly identified a publicly accessible ClickHouse database. This database, hosted without any authentication, was linked to DeepSeek via the following hosts:
The exposed database contained over a million lines of log streams, revealing a treasure trove of sensitive data, including:
The log_stream table within the ClickHouse database was particularly revealing. Key columns included:
The lack of authentication granted full database control, allowing attackers to:
Fortunately, Wiz Research responsibly disclosed the issue to DeepSeek, who promptly secured the exposure.
This incident serves as a critical reminder of the inherent risks associated with the rapid adoption of AI services without adequate security measures. Several key takeaways emerge:
The DeepSeek database exposure underscores the urgent need for the AI industry to prioritize security. As AI becomes deeply integrated into businesses worldwide, the industry must embrace security practices on par with those required for public cloud providers and major infrastructure providers. Neglecting these can lead to security exposures for AI applications.
To further understand the broader AI Landscape, read Wiz's State of AI in the Cloud 2025
Tags: #Research, Cloud Security
