tl;dr: A researcher discovered five critical cross-tenant vulnerabilities in Azure's API Connections (part of Logic Apps), each allowing full compromise of other tenants' connected backends like Key Vaults, SQL databases, Jira, or Salesforce. The exploits leveraged path traversal in ARM's DynamicInvoke/DynamicList endpoints and an undocumented `host.api.RuntimeUrl` parameter in Consumption Logic Apps, with Microsoft's initial patches repeatedly bypassable due to validation occurring before path normalization. The vulnerabilities earned $200,000 in bounties and highlight systemic architectural weaknesses where APIM has implicit access to all connections, relying solely on fragile input validation.