Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
According to Wiz, a now-patched vulnerability in Azure Cosmos DB might have allowed an attacker to bypass the Gremlin query sandbox and get complete read and write access to databases across customer tenancies.
The exploit chain started with a forged query against an attacker-controlled Gremlin database, according to Wiz, which nicknamed the chain CosmosEscape. The researchers were then able to identify a target and obtain its primary account key through code execution on a multi-tenant gateway, which revealed a regional account directory and a platform-wide signature secret.
Within 48 hours of the November 2025 revelation, Microsoft disabled the susceptible Gremlin entry point. According to Wiz, Microsoft removed the platform-wide key and finished the longer-term remedy for all are...