CosmosEscape gave attackers full control of every Azure Cosmos DB database
Wiz discovered a chain called CosmosEscape that lets a crafted Gremlin query break out of Azure Cosmos DB’s sandbox, retrieve the platform‑wide master key and read or write any database in a tenant. Microsoft has patched the flaw and removed the master key, so no customer action is required.