Back Feeds.4Sysops

Microsoft eliminates Cosmos Master Key after critical Azure Cosmos DB vulnerability

Feeds.4Sysops •IT News • July 30, 2026

Microsoft has completed a global remediation for CosmosEscape, a critical Azure Cosmos DB vulnerability that could have exposed databases across customer tenants. The fix removes the platform-wide signing key, and Microsoft says its investigation found no unauthorized customer activity or need for customer action. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CosmosEscape Vulnerability Exposes Azure Cosmos DB to Potential Attacks Wiz Research disclosed a critical vulnerability named CosmosEscape in Azure Cosmos DB, allowing attackers to potentially compromise every database in the service, including Microsoft's internal systems like Entra ID, Teams, and Copilot. The flaw, residing in the Gremlin API, could have enabled attackers to acquire the Cosmos Master Key, granting full read and write access to databases. This vulnerability posed a significant risk of cross-tenant attacks, potentially impacting millions of workloads. Microsoft has since remediated the issue by eliminating the Cosmos Master Key and has confirmed no evidence of exploitation. Security experts emphasize the importance of reviewing security postures despite the patch, as traditional tools may not detect such vulnerabilities. The incident serves as a reminder of the inherent risks in shared cloud infrastructure. 6 sources 71

Extracted Entities

Microsoft eliminates Cosmos Master Key after critical Azure Cosmos DB vulnerability

The full story

Extracted Entities

Attack Types (1)

Platforms (1)

Vulnerabilities (1)