What is the CVSS score of CVE-2026-13751?

CVE-2026-13751 has a contested CVSS base score of 9.6 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Snowflake CLI are affected by CVE-2026-13751?

Snowflake CLI versions 3.6.0-3.18.x contain a critical vulnerability enabling data exposure if users are tricked into processing attacker-supplied SQL commands.. A patch is available.

How to fix or mitigate CVE-2026-13751?

24 hours: Identify and catalog all Snowflake CLI installations across development, CI/CD, and production systems; determine which are running versions 3.6.0-3.18.x. 7 days: Obtain the patched Snowflake CLI version from the vendor; deploy to test environment and validate SQL operations and remote reference handling. 30 days: Complete production deployment of patched CLI across all affected teams and systems.

Snowflake CLI CVE-2026-13751

EUVD-2026-40147 CRITICAL

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2026-06-29 412d305a-227d-44f9-a262-a31ba44f2aea

GHSA-6xpv-fwh6-29jc

SSRF Snowflake Cli

Critical

Disputed · 9.6 NVD

Severity by source

Sources disagree (Medium–Critical)

Vendor (412d305a-227d-44f9-a262-a31ba44f2aea) PRIMARY

MEDIUM

qualitative

NVD

9.6 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

9.6 CRITICAL

Network parser with no auth gate (PR:N) but requires victim to run crafted SQL (UI:R); SSRF plus session-context SQL execution crosses scope (S:C) with high C/I, while availability impact is limited (A:L).

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Jun 30, 2026 - 16:28 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 30, 2026 - 16:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 30, 2026 - 16:22 vuln.today

cvss_changed

Severity Changed

Jun 30, 2026 - 16:22 NVD

MEDIUM CRITICAL

CVSS changed

Jun 30, 2026 - 16:22 NVD

4.1 (MEDIUM) 9.6 (CRITICAL)

Patch available

Jun 29, 2026 - 19:01 EUVD

Analysis Generated

Jun 29, 2026 - 17:33 vuln.today

DescriptionNVD

Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient restriction on the request destination. By supplying crafted SQL content processed through a vulnerable command path, an attacker could cause the victim's environment to issue unintended outbound requests to internal or otherwise non-public network locations, and could cause remote SQL content to be retrieved and executed in the context of the victim user's session. Successful exploitation requires the victim to process attacker-controlled content through a vulnerable command path and is limited by the privileges available to that session and environment. The fix is available in Snowflake CLI version 3.19, which adds an option to disable remote URL retrieval.

AnalysisAI

Server-side request forgery in Snowflake CLI versions 3.6.0 through 3.18.x lets an attacker coerce a victim's CLI session into fetching attacker-chosen remote URLs and then retrieving and executing remote SQL in that session's context. The flaw lives in the SQL statement reader's !source/!load directives, which resolve remote references at runtime without restricting the request destination, so a victim who processes attacker-supplied SQL can be made to reach internal/non-public network locations. Despite a 9.6 CVSS, real-world urgency is tempered by required user interaction and a low EPSS (0.09%); there is no public exploit identified at time of analysis and it is not in CISA KEV.

Technical ContextAI

Snowflake CLI is the official command-line client for Snowflake's data platform, used by developers and data engineers to run SQL scripts and manage objects. The vulnerable component is the SQL statement reader that interprets the !source and !load meta-directives (used to include external SQL files); in affected builds these directives accept remote URLs and dereference them at execution time. This maps to CWE-829 (Inclusion of Functionality from an Untrusted Control Sphere): the reader pulls executable SQL content from a control sphere the user does not trust and runs it inline. Because the fetch destination is unrestricted, the same primitive doubles as SSRF - the CLI host becomes an outbound request proxy reaching internal endpoints, and the retrieved SQL is then executed with the victim session's Snowflake privileges. The single affected product per CPE is cpe:2.3:a:snowflake:snowflake_cli (tagged SSRF, Snowflake CLI).

RemediationAI

Upgrade to the fixed release - Vendor-released patch: Snowflake CLI version 3.19.0, which introduces an option to disable remote URL retrieval; this is the primary and recommended fix. After upgrading, explicitly enable/confirm the new setting that disables remote !source/!load URL retrieval so the SSRF primitive is closed even if a script attempts it. As a compensating control where immediate upgrade is not possible, do not run SQL scripts from untrusted or externally-sourced files through the CLI, and treat !source/!load directives in shared SQL as dangerous input; on the network side, restrict outbound egress from CLI hosts so they cannot reach internal/metadata or sensitive non-public endpoints (trade-off: may break legitimate internal includes), and run the CLI under a least-privilege Snowflake role to cap what retrieved SQL can do (trade-off: may require role adjustments in automation). See the vendor advisory at https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory for authoritative guidance.