Critical CosmosEscape Vulnerability Exposes Azure Cosmos DB to Potential Attacks

**Executive Summary:** Wiz Research disclosed a critical vulnerability called CosmosEscape in Azure Cosmos DB’s Gremlin API that could have allowed attackers to obtain the Cosmos Master Key and gain full read/write access to all databases (including Microsoft internal services); Microsoft has remediated the issue and reports no evidence of exploitation, but organizations should review their security controls.