Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database

A chained vulnerability in Azure Cosmos DB's Gremlin query interface allowed attackers to escape the sandbox, execute arbitrary code, and ultimately retrieve platform-wide signing secrets that could grant access to any customer database across all tenants. The root failure was a combination of insufficient sandbox isolation and the existence of a single, overly privileged platform-wide key — a catastrophic 'blast radius' design flaw. This matters because a single exploitation path could have compromised every customer's data simultaneously, violating foundational multi-tenancy isolation guarantees. Cloud providers must treat cross-tenant privilege escalation paths as critical-severity issues requiring both rapid patching and architectural remediation. Microsoft's 48-hour initial patch response was commendable, but the 8-month timeline to fully eliminate the platform-wide key highlights the systemic risk of legacy privileged credential architectures.