EUVD-2026-40149
GHSA-2jqx-3g86-5c63
Severity by source
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Runs in an authenticated session so PR:L, and requires the victim to invoke the command with crafted input so UI:R; injected SQL yields full C/I/A within session scope.
Primary rating from Vendor (412d305a-227d-44f9-a262-a31ba44f2aea).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
7DescriptionNVD
Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the context of the user’s Snowflake session. Successful exploitation required crafted values to reach vulnerable parameters, including through socially engineered input, malicious repository configuration, or compromised automation feeding external values into the CLI, and impact is limited by the privileges assigned to the active session. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade.
AnalysisAI
SQL injection in Snowflake CLI versions 1.1.0 through 3.18.x (fixed in 3.19) lets crafted parameter values reach vulnerable command paths and execute unintended SQL within the user's active Snowflake session. An authenticated CLI user who is fed malicious input - via social engineering, a poisoned repository configuration, or compromised automation - can have arbitrary statements run against their session, with impact bounded by that session's privileges. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to run a vulnerable Snowflake CLI command (version 1.1.0-3.18.x) with an active, authenticated Snowflake session, and requires the attacker to get crafted values into a vulnerable parameter path - explicitly via socially engineered input, a malicious repository configuration the CLI reads, or compromised automation feeding external values into the CLI. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score is 8.0 (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), reflecting high confidentiality, integrity, and availability impact but tempered by the need for low privileges (an authenticated session) and required user interaction (UI:R) - the attacker must get crafted input in front of the CLI. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker plants crafted values in a shared repository configuration or a CI/CD variable that an engineer's Snowflake CLI later consumes; when the engineer runs a vulnerable command, the crafted value reaches an unsanitized parameter and the CLI executes attacker-chosen SQL inside that engineer's authenticated session, allowing data exfiltration or modification limited only by the session's role. No public exploit is identified, and the AV:N/AC:L but PR:L/UI:R vector means exploitation is technically simple once input delivery and an active privileged session are both achieved. |
| Remediation | Vendor-released patch: Snowflake CLI version 3.19.0 - upgrade all installations to 3.19 or later, noting that the fix is not automatic and users must manually upgrade per the vendor advisory at https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all systems running Snowflake CLI versions 1.1.0-3.18.x. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Snowflake Cli
View allArbitrary code execution in Snowflake CLI versions prior to 3.19 lets an attacker run code in the context of any develop
SQL injection in Snowflake CLI versions 1.2.2 through 3.18.x allows an attacker to execute unintended SQL statements wit
Server-side request forgery in Snowflake CLI versions 3.6.0 through 3.18.x lets an attacker coerce a victim's CLI sessio
Path traversal in Snowflake CLI versions prior to 3.19 enables arbitrary local file exfiltration to Snowflake cloud serv
Snowflake CLI versions prior to 3.19 write plaintext credentials - including passwords, authentication tokens, and priva
Snowflake CLI versions prior to 3.19 permit self-injection SQL execution through improper neutralization of local CLI pa
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today