What is the CVSS score of EUVD-2026-40129?

EUVD-2026-40129 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Snowflake CLI are affected by EUVD-2026-40129?

Snowflake CLI versions 1.2.2 through 3.18.x contain a SQL injection vulnerability exploitable when developers process malicious project configuration files or code repositories.. A patch is available.

How to fix or mitigate EUVD-2026-40129?

Within 24 hours: Identify all Snowflake CLI instances in your environment running versions 1.2.2 through 3.18.x via asset inventory. Within 7 days: Upgrade all affected systems to the latest Snowflake CLI version per vendor advisory. Within 30 days: Review Snowflake query logs and data access patterns for signs of unauthorized SQL execution or data exfiltration among developers using vulnerable CLI versions.

Snowflake CLI EUVD-2026-40129

| CVE-2026-13744 HIGH

SQL Injection (CWE-89)

2026-06-29 SNOWFLAKE

GHSA-6whc-m7mm-g2x4

SQLi Snowflake Cli

8.8

CVSS 3.1 · NVD

Severity by source

Vendor (SNOWFLAKE) PRIMARY

HIGH

qualitative

NVD

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Attacker needs no credentials (PR:N) but the victim must process malicious content through a CLI command (UI:R); injected SQL yields full read/write/destroy within the session, so C/I/A:H.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (SNOWFLAKE).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Jun 30, 2026 - 16:30 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 30, 2026 - 16:29 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 30, 2026 - 16:22 vuln.today

cvss_changed

CVSS changed

Jun 30, 2026 - 16:22 NVD

8.3 (HIGH) 8.8 (HIGH)

Patch available

Jun 29, 2026 - 18:01 EUVD

Analysis Generated

Jun 29, 2026 - 16:32 vuln.today

DescriptionNVD

Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snowflake CLI to execute unintended SQL in the context of the victim user's Snowflake session. Successful exploitation requires the victim to process attacker-controlled content through a vulnerable command path and is limited by the privileges assigned to that session. The fix is available in Snowflake CLI version 3.19. Users must manually upgrade.

AnalysisAI

SQL injection in Snowflake CLI versions 1.2.2 through 3.18.x allows an attacker to execute unintended SQL statements within a victim's authenticated Snowflake session by planting crafted repository content, project configuration, manifest, or specification input. When a developer processes that attacker-controlled content through a vulnerable command path, the injected SQL runs with the victim's session privileges, enabling data theft, modification, or destruction up to that user's authorization level. There is no public exploit identified at time of analysis, exploitation is not confirmed in CISA KEV, and EPSS is low at 0.31% (23rd percentile), reflecting the user-interaction requirement.

Technical ContextAI

Snowflake CLI is the official command-line client (cpe:2.3:a:snowflake:snowflake_cli) used by developers to build, deploy, and manage Snowflake objects, Native Apps, and Snowpark/streamlit projects. The root cause is CWE-89 (improper neutralization of special elements used in an SQL command): the CLI builds and submits SQL to the Snowflake engine using values drawn from project files (project configuration, manifests, specifications) and repository content without sufficiently neutralizing attacker-influenced identifiers or literals. Because these inputs feed directly into statements executed against the user's live session, malicious content embedded in a shared project or repo becomes a SQL injection primitive at command execution time.

RemediationAI

Vendor-released patch: Snowflake CLI version 3.19.0 - upgrade to 3.19.0 or later, noting that Snowflake states users must MANUALLY upgrade (there is no automatic update), so pin the new version explicitly in developer machines, build images, and CI/CD pipelines. Until upgraded, treat untrusted Snowflake CLI projects and repositories as hostile: avoid running CLI commands against repository content, project configs, manifests, or specifications from untrusted or externally contributed sources, and review those files before processing them. As a defense-in-depth compensating control, run the CLI under a Snowflake role with least-privilege scoping so any injected SQL is bounded by minimal session privileges (trade-off: may require role adjustments for legitimate workflows). Consult the Snowflake advisory at https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory for authoritative guidance.