⤷ Title: Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 15:17:42 +0000
════════════════════════
⌗ Tags: #Security #Azure #Azure Cosmos DB #Cosmos DB #CosmosEscape #Cybersecurity #database #Microsoft #Vulnerability
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 15:17:42 +0000
════════════════════════
⌗ Tags: #Security #Azure #Azure Cosmos DB #Cosmos DB #CosmosEscape #Cybersecurity #database #Microsoft #Vulnerability
Hackread
Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover
Wiz found CosmosEscape in Azure's Gremlin API, exposing a master key that could access any Cosmos DB account. Microsoft fixed it, with no customer impact found.