Snowflake Vulnerabilities and Affected Products
Vulnerabilities associated with Snowflake CLI.
Products
Clear product- Snowflake CLI7 vulnerabilities
- Cortex Code CLI1 vulnerability
- Snowflake Connector for Python1 vulnerability
- Snowflake libsnowflakeclient1 vulnerability
- Snowflake ODBC1 vulnerability
- Snowflake ODBC Driver1 vulnerability
- Snowflake PHP PDO Driver1 vulnerability
- Snowflake Python APIs1 vulnerability
- Snowflake Spark Connector1 vulnerability
- Snowflake SQLAlchemy1 vulnerability
- snowflake_jdbc1 vulnerability
- Snowpark Python SDK1 vulnerability
- Terraform Provider for Snowflake1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-13752MEDIUM | Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log CommandsImproper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the context of the user’s Snowflake session. Successful exploitation required crafted values to reach vulnerable parameters, including through socially engineered input, malicious repository configuration, or compromised automation feeding external … CWE-89Jun 29, 2026 | CVSS6.0v3.1 | EPSS0.188% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-13751MEDIUM | Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!loadImproper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient restriction on the request destination. By supplying crafted SQL content processed through a vulnerable command path, an attacker could cause the victim's environment to issue unintended outbound requests to internal or otherwise non-public net… | CVSS4.1v3.1 | EPSS0.118% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-13750MEDIUM | Snowflake CLI Sensitive Credential Exposure Through Debug LoggingInsertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs. An attacker could exploit this by obtaining read access to the affected user's local log files, causing credentials such as passwords, tokens, or private key material to be exposed without additional application-level safeguards. Successful exploitation requires credentials to be present in the affected connection context and the re… CWE-532Jun 29, 2026 | CVSS5.5v3.1 | EPSS0.108% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-13749HIGH | Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template InjectionImproper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generated Python code, causing Snowflake CLI to execute attacker-controlled code in the local context of the user running the CLI. Successful exploitation requires the victim to run the relevant bundling or depl… CWE-94Jun 29, 2026 | CVSS8.8v3.1 | EPSS0.378% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-13748MEDIUM | Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path RestrictionImproper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted to Snowflake services. An attacker could exploit this by supplying crafted repository or project content that referenced files outside the intended project boundary, causing Snowflake CLI to read local files and upload or embed their contents during deployment or SQL template processing. Successful exploitation required the victim to process attacke… | CVSS6.3v3.1 | EPSS0.139% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI ParametersImproper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this issue by supplying crafted values to vulnerable Cortex SQL or object listing command paths, causing Snowflake CLI to execute unintended SQL in the context of that user's Snowflake session. Successful exploitation is constrained to self-injection because the vulnerable parameters were supplied directly through local CLI arguments rather than through p… CWE-89Jun 29, 2026 | CVSS3.6v3.1 | EPSS0.13% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2026-13744HIGH | Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled InputImproper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snowflake CLI to execute unintended SQL in the context of the victim user's Snowflake session. Successful exploitation requires the victim to process attacker-controlled content through a vulnerable command path and is limited by the privileges… CWE-89Jun 29, 2026 | CVSS8.3v3.1 | EPSS0.32% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |