Executive brief
DeepWiki-Open is an AI-powered wiki generator that processes repository documentation. An unauthenticated attacker can exploit a flaw in the /ws/chat WebSocket endpoint to read arbitrary files from the server by supplying malicious filesystem paths, potentially exposing hardcoded secrets, credentials, and sensitive source code files.
Technical details
The vulnerability is an arbitrary file read flaw in the unauthenticated /ws/chat WebSocket endpoint. The vulnerable component accepts a repo_url parameter that is treated as a filesystem path without proper validation or path containment controls. An attacker can supply directory traversal sequences or absolute paths to read files with supported extensions including Python, JavaScript, YAML, and JSON files. No authentication is required to exploit this issue. The attack is network-reachable and requires only the ability to establish a WebSocket connection. Attackers can extract hardcoded secrets, API keys, credentials, and sensitive configuration data stored in these files. A patch availability or mitigation guidance is not mentioned in the advisory.
Affected products
- AsyncFuncAI DeepWiki-Open through commit d92819a
Timeline
- 2026-09-14: disclosed