AI Summary

A vulnerability in Azure Cosmos DB, now patched, could have allowed an attacker to escape the Gremlin query sandbox and gain full read and write access to databases across customer tenants. Wiz identified the flaw, codenamed CosmosEscape, and described the exploit chain. It began with a crafted query sent to a Gremlin database that the attacker controlled. The query would bypass the sandbox, enabling the attacker to access and modify data in other tenant databases. The issue was reported to Microsoft and has since been fixed.

AI summaries can be wrong sometimes—always verify important details using the source article.