In a nutshell: Wiz researchers have discovered a master key vulnerability in Azure Cosmos DB that potentially compromises full database access.
Security researchers at Wiz have identified a critical vulnerability in Microsoft Azure Cosmos DB that could potentially allow attackers to access databases using a master key. The flaw affects the cloud infrastructure of Azure customers.
Security researchers at Wiz have identified a security vulnerability in Microsoft Azure Cosmos DB that exposes master key access. This weakness could theoretically enable attackers to access Azure Cosmos DB instances if they obtain the master key.
For CISOs, this discovery has immediate relevance, as Azure Cosmos DB is deployed in many enterprise environments for highly sensitive data management. Compromise of the master key would grant complete access to the respective database instance and thus endanger all data stored there – regardless of granular permissions or RBAC configurations.
The specific vulnerability and required countermeasures should be evaluated as soon as possible. CISOs must review how and where their master keys for Azure Cosmos DB are stored and managed, and ensure that key vault practices and access controls comply with current security standards.
Source: borncity.com · Published 31 July 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.3.