Apache Airflow Providers Snowflake CVE-2025-50213

This vulnerability represents critical real-world risk despite lacking explicit KEV/EPSS confirmation in the provided data. The CVSS 9.8 score reflects: AV:N (network-accessible—Airflow DAGs can be triggered remotely), AC:L (low complexity—standard SQL injection), PR:N (no privileges required), UI:N (no user interaction), S:U/C:H/I:H/A:H (complete confidentiality, integrity, and availability impact). The attack surface is expansive because Airflow is widely deployed for ETL/data pipeline orchestration in cloud environments, and the CopyFromExternalStageToSnowflakeOperator is a commonly used component. Unlike CVSS-inflation issues, this combines high severity with operational reality: attackers with DAG/workflow access (or those exploiting misconfigured Airflow API endpoints) can inject SQL to exfiltrate data, modify warehouse configurations, or destroy tables. Organizations using Airflow <6.4.0 with Snowflake should treat this as immediate/critical priority.

An attacker with network access to an unsecured Airflow API (or internal access to an organization's Airflow environment) constructs a malicious DAG or manually triggers a CopyFromExternalStageToSnowflakeOperator task with a crafted table parameter such as: table='my_table; DROP TABLE sensitive_data;--'. Because the operator concatenates this unsanitized input directly into the SQL COPY command sent to Snowflake (e.g., COPY INTO my_table; DROP TABLE sensitive_data;-- FROM ...), Snowflake executes both the intended COPY and the injected DROP statement. This could lead to data exfiltration (by redirecting the COPY to an attacker-controlled stage), data destruction, or warehouse reconfiguration. The low CVSS attack complexity and lack of authentication requirements mean this can be exploited by insiders or external attackers who gain any foothold in the Airflow environment.