services / Azure / Garnet cluster vector set

A vector set inside an Azure Cosmos DB for Garnet cluster, a Redis-compatible in-memory data store used to hold vector embeddings and associated attributes for similarity search / retrieval workloads.

Production database resource holding organizational data (embeddings and their payloads); these are data-plane (isDataAction) operations on the stored vectors.

Microsoft.​DocumentDB/​garnetClusters/​acl/​vemb/​read

Returns the actual stored embedding values for a vector, directly exfiltrating sensitive organizational data (embeddings can reconstruct underlying content).

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links