Anatomy of the CosmosEscape Master Key Bug: What Azure Got Wrong
CVE-2026-66803 vulnerability postmortem. How Wiz researchers escaped the Gremlin query sandbox to extract Azure's platform-wide Cosmos Master Key.
8/1/202625 min read
2 articles tagged with Cosmos DB
CVE-2026-66803 vulnerability postmortem. How Wiz researchers escaped the Gremlin query sandbox to extract Azure's platform-wide Cosmos Master Key.
A postmortem of the major Azure Cosmos DB cloud database vulnerability. Analyze Gremlin API sandbox escapes, gateway code execution, and key rotation strategies.