EUVD-2026-42284
GHSA-gg43-cq29-hhv2
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable via CI/CD but requires influencing a specific enabled data source's workspace variable (AC:H) with pipeline write access (PR:L); injected SQL under the privileged session yields full C/I/A impact.
Primary rating from Vendor (412d305a-227d-44f9-a262-a31ba44f2aea).
CVSS VectorVendor: 412d305a-227d-44f9-a262-a31ba44f2aea
Lifecycle Timeline
2DescriptionCVE.org
Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration and minting of long-lived access credentials. Exploitation requires the ability for an attacker to influence a workspace variable in a pipeline where this data source was enabled. Improper neutralization of identifier content in user resource inputs could allow DDL injection into user management statements, potentially causing accounts to be created with attacker-controlled credentials and without the security controls configured by the operator. The fix is available in Snowflake Terraform Provider version 2.18.0. Users must manually upgrade.
Articles & Coverage 1
AnalysisAI
SQL and DDL injection in the Snowflake Terraform Provider before 2.18.0 lets an attacker who can influence pipeline workspace variables execute arbitrary SQL inside the provider's privileged Snowflake session (CWE-89), enabling data exfiltration and creation of long-lived credentials. A second flaw allows identifier-injection into user-management DDL, so accounts can be minted with attacker-controlled credentials that bypass operator-configured security controls. No public exploit identified at time of analysis; risk is authenticated/insider-driven rather than remote-unauthenticated.
Technical ContextAI
The affected component is the HashiCorp Terraform provider for Snowflake (registry.terraform.io/snowflakedb/terraform-provider-snowflake), an infrastructure-as-code plugin that translates Terraform resource/data-source definitions into SQL and DDL statements run against Snowflake under a privileged provider session. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command): user-controllable input flowing into a data source is concatenated into SQL without sanitization, and identifier content in user-resource inputs is not neutralized before being embedded in user-management DDL. Because the provider executes these statements with the credentials configured by the operator (often ACCOUNTADMIN-class privileges), injected SQL/DDL inherits that authority. No CPE strings were supplied in the intelligence, so exact affected configurations are derived from the description and the vendor release notes only.
RemediationAI
Vendor-released patch: 2.18.0 - upgrade the Snowflake Terraform Provider to 2.18.0 or later by updating the version constraint in your Terraform configuration and running an init/upgrade; the vendor notes the upgrade is manual and not automatic. Release details are at https://github.com/snowflakedb/terraform-provider-snowflake/releases. As compensating controls until upgraded: restrict who can modify pipeline/workspace variables and Terraform variable inputs (protected branches, mandatory review) to close the SQLi precondition; avoid enabling the affected data source in pipelines that accept untrusted input; and scope the provider's Snowflake role to least privilege rather than ACCOUNTADMIN so injected SQL/DDL cannot mint privileged accounts or exfiltrate broadly - noting the trade-off that a reduced role may break resources that legitimately require elevated grants. Audit recently created Snowflake users for unexpected or attacker-controlled credentials.
Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
Unauthenticated remote attackers can trigger complete database overwrites, server-side file reads, and SSRF attacks agai
HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE-type bound labels for Va
An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault
PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers
The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute
Account takeover in self-hosted Bitwarden Server before 2026.6.0 lets a low-privileged organization member steal any oth
vault-cli is a configurable command-line interface tool (and python library) to interact with Hashicorp Vault. Rated cri
The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, w
The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows re
Server-side request forgery in the Ruby css_parser gem (< 3.0.0) lets a remote unauthenticated attacker force the parsin
HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo help
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today