services / Azure / Query Store query texts

Query Store query texts are the captured raw SQL statement texts of queries executed against an Azure SQL database, retained for performance analysis. The text often embeds literal parameter values, predicates, identifiers, and schema details.

Although a diagnostic feature, the stored SQL text can leak production data values and full schema, so reading it is effectively data exfiltration from inside the database.

Microsoft.​Sql/​servers/​databases/​queryStore/​queryTexts/​read

Returns the actual executed SQL statement text, which routinely contains literal values and sensitive identifiers, exfiltrating data and schema from within the production database.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links