CosmosEscape Vulnerability: Critical Azure Cosmos DB Flaw

**CosmosEscape Vulnerability (2026)**: Security researchers at Wiz disclosed a critical vulnerability in Azure Cosmos DB's Gremlin API that permitted unrestricted .NET reflection, enabling arbitrary code execution on the Cosmos DB gateway and potential extraction of an unscoped Cosmos Master Key with risk of cross-tenant database access; Microsoft implemented architectural remediations (removing the master key and strengthening controls) and reported no evidence of active exploitation, while advising continued cloud security best practices.