vulnerability
Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
High
Summary
A vulnerability in Azure Cosmos DB, dubbed CosmosEscape by Wiz, allowed an attacker to bypass the service's query sandbox and gain platform-wide access to customer databases. The exploit chain began with a crafted Gremlin query and leveraged .NET reflection to retrieve account keys and access a regional database directory containing Cosmos DB account information. Microsoft patched the vulnerability in July 2026 and confirmed that no customer data was accessed.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data