services / Azure / Garnet cluster vector set

A vector set inside an Azure Cosmos DB for Garnet cluster, a Redis-compatible in-memory data store used to hold vector embeddings and associated attributes for similarity search / retrieval workloads.

Production database resource holding organizational data (embeddings and their payloads); these are data-plane (isDataAction) operations on the stored vectors.

Microsoft.​DocumentDB/​garnetClusters/​acl/​vgetattr/​read

Returns the attribute payload (often source text/metadata) attached to a stored vector, directly exfiltrating organizational data.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links