
Researchers Disclose 'CosmosEscape' Flaw That Could Have Exposed Every Azure Cosmos DB Database
Wiz Research found a vulnerability chain that could have let an attacker extract a platform-wide master key from Azure Cosmos DB, then use it to retrieve the primary key of any customer database on the service, including ones behind network isolation. Microsoft fixed it months before the public write-up.










