Wiz researchers discover CosmosEscape vulnerability that could take over every database in Azure Cosmos DB

Wiz researchers found a single credential that could unlock every database running on Microsoft's Azure Cosmos DB, naming it the Cosmos Master Key. The vulnerability was discovered using an AI-powered bug-hunting tool.

• Wiz’s AI bug-hunter helped find a master key to every database in Azure Cosmos DB
• Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
• CosmosEscape: Taking over Every Database in Azure Cosmos DB