Unknown · Local-Deep-Research · CVE-2025-57806
**Name of the Vulnerable Software and Affected Versions**
Local Deep Research versions 0.2.0 through 0.6.7
**Description**
Local Deep Research stores confidential information, including API keys, in a local SQLite database without encryption. This behavior was not clearly documented. Users were not given the ability to configure the database location, allowing anyone with access to the container or host filesystem to retrieve sensitive data in plaintext by accessing the `.db` file.
**Recommendations**
Update to version 1.0.0.