CosmosEscape: How Wiz Researchers Uncovered a Critical Azure Cosmos DB Vulnerability

CosmosEscape: Taking over Every Database in Azure Cosmos DB

Our team at Wiz Research discovered CosmosEscape, a severe flaw in Azure Cosmos DB that allowed attackers to compromise every database in the service. By exploiting the Gremlin API, we identified a platform-wide secret we called the Cosmos Master Key, which enabled full takeover and enumeration of accounts. This vulnerability threatened Microsoft's internal services like Teams and Copilot. Microsoft has since fully remediated the issue without evidence of exploitation.