Wiz Discloses CosmosEscape, and Practitioners Debate What Customers Could Have Done

Steef-Jan Wiggers — Thu, 06 Aug 2026 09:21:00 GMT

Wiz Research disclosed CosmosEscape, a chain that escaped Azure Cosmos DB's Gremlin sandbox and reached a platform-wide key granting read and write access to every database on the service. Microsoft blocked the entry point within two days but took until July 2026 to remove the key. Practitioners debated shared responsibility and what that rearchitecture actually cost.

By Steef-Jan Wiggers

InfoQ - Access Control

Wiz Discloses CosmosEscape, and Practitioners Debate What Customers Could Have Done