EUVD-2026-40132
GHSA-656q-44hg-7hm7
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Local vector and high complexity reflect self-injection via deliberate local CLI argument supply; PR:L requires an authenticated session; no availability impact applies.
Primary rating from Vendor (SNOWFLAKE).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Lifecycle Timeline
4DescriptionNVD
Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this issue by supplying crafted values to vulnerable Cortex SQL or object listing command paths, causing Snowflake CLI to execute unintended SQL in the context of that user's Snowflake session. Successful exploitation is constrained to self-injection because the vulnerable parameters were supplied directly through local CLI arguments rather than through project files, repositories, or other external input sources, and impact is limited to the privileges already available to the current session. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade.
AnalysisAI
Snowflake CLI versions prior to 3.19 permit self-injection SQL execution through improper neutralization of local CLI parameters in Cortex SQL and object listing command paths, where crafted argument values cause the tool to construct and execute unintended SQL within the authenticated user's existing Snowflake session. Exploitation is structurally constrained to self-injection - the attacker must themselves supply the malicious values via local CLI arguments, and impact cannot exceed the privileges already held by the current session context. No public exploit code has been identified and no active exploitation is confirmed; the vendor-assigned CVSS score of 3.6 (Low) accurately reflects the narrow attack surface and bounded impact.
Technical ContextAI
The affected product is Snowflake CLI (CPE: cpe:2.3:a:snowflake:snowflake_cli:*:*:*:*:*:*:*:*), the official command-line interface for interacting with the Snowflake cloud data platform. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), a classic SQL injection class. The CLI constructs SQL statements from user-supplied CLI argument values - specifically in Cortex SQL command paths and object listing operations - without properly sanitizing or escaping those values before incorporating them into query strings dispatched to the Snowflake service. Because the injection surface is the local CLI argument vector rather than a shared or external input source (e.g., project files, configuration repositories, or networked user input), the vulnerability is architecturally bounded: the person triggering the injection is the same person whose session executes the resulting SQL.
RemediationAI
The primary fix is upgrading Snowflake CLI to version 3.19 or later; Snowflake has confirmed this version contains the patch. Importantly, the upgrade must be performed manually by each user - there is no automatic update mechanism noted in the advisory. Users can verify their installed version and upgrade via standard Python package tooling (e.g., pip install --upgrade snowflake-cli). For environments where immediate upgrade is not feasible, compensating controls include restricting use of the affected Cortex SQL and object listing command paths, and enforcing the principle of least privilege on Snowflake session roles to minimize the impact of any unintended SQL execution within a session. Because the vulnerability is self-injection only, organizations running the CLI in automated pipelines with scripted, controlled argument values face materially lower residual risk than interactive user deployments. Full advisory details are at https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory.
More in Snowflake Cli
View allArbitrary code execution in Snowflake CLI versions prior to 3.19 lets an attacker run code in the context of any develop
SQL injection in Snowflake CLI versions 1.2.2 through 3.18.x allows an attacker to execute unintended SQL statements wit
SQL injection in Snowflake CLI versions 1.1.0 through 3.18.x (fixed in 3.19) lets crafted parameter values reach vulnera
Server-side request forgery in Snowflake CLI versions 3.6.0 through 3.18.x lets an attacker coerce a victim's CLI sessio
Path traversal in Snowflake CLI versions prior to 3.19 enables arbitrary local file exfiltration to Snowflake cloud serv
Snowflake CLI versions prior to 3.19 write plaintext credentials - including passwords, authentication tokens, and priva
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today