What is the CVSS score of EUVD-2026-42282?

EUVD-2026-42282 has a CVSS 3.1 base score of 9.6 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.3%.

Which versions of Snowpark Python are affected by EUVD-2026-42282?

Snowflake Snowpark Python SDK before version 1.53.0 contains a SQL injection vulnerability enabling authenticated users to bypass authorization controls and access data beyond their assigned…. A patch is available.

How to fix or mitigate EUVD-2026-42282?

WITHIN 24 HOURS: Inventory all systems and applications running snowpark-python versions before 1.53.0 via dependency scanning and Software Composition Analysis tools. WITHIN 7 DAYS: Since no patch is currently available, implement compensating controls by restricting SDK usage to least-privileged service accounts and isolated trusted applications; audit and minimize Snowflake user account permissions to enforce least-privilege access. WITHIN 30 DAYS: Monitor Snowflake security advisories; prepare and stage upgrade to snowpark-python 1.53.0 or later for immediate deployment upon patch availability.

Snowpark Python EUVD-2026-42282

| CVE-2026-15062 CRITICAL

SQL Injection (CWE-89)

2026-07-08 412d305a-227d-44f9-a262-a31ba44f2aea

GHSA-872q-cxrp-279p

Python SQLi

9.6

CVSS 3.1 · Vendor: 412d305a-227d-44f9-a262-a31ba44f2aea

Severity by source

Vendor (412d305a-227d-44f9-a262-a31ba44f2aea) PRIMARY

9.6 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

vuln.today AI

9.6 CRITICAL

Authenticated low-privilege user (PR:L) injects SQL over the network (AV:N/AC:L); cross-tenant/source-database reach is a scope change (S:C) with high confidentiality and integrity loss but no availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Primary rating from Vendor (412d305a-227d-44f9-a262-a31ba44f2aea).

CVSS VectorVendor: 412d305a-227d-44f9-a262-a31ba44f2aea

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Patch available

Jul 08, 2026 - 16:01 EUVD

Analysis Generated

Jul 08, 2026 - 15:36 vuln.today

DescriptionCVE.org

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database column names to escalate privileges via the DataFrameReader.dbapi() API by supplying a specially crafted location parameter to DataFrameWriter write methods to redirect a COPY INTO to an arbitrary source query, or by including a backslash-single-quote sequence in an export path to defeat the normalize_path() sanitizer and inject SQL via DataFrame.to_csv(). Successful exploitation may result in source database compromise, unauthorized cross-tenant data exfiltration, or unauthorized read of Snowflake account data.

Articles & Coverage 2

News 10 New Python Vulnerabilities - 2 Critical, 8 High, 1 With POC Jul 09, 2026 News Critical SQL Injection in Snowflake Snowpark Python SDK before 1.53.0 - CVE-2026-15062 Jul 08, 2026

AnalysisAI

SQL injection in the Snowflake Snowpark Python SDK (snowpark-python) before 1.53.0 lets an authenticated low-privilege Snowflake user execute SQL beyond their authorization scope, enabling cross-tenant data theft and source-database compromise. Three distinct injection points are involved - malicious source column names via DataFrameReader.dbapi(), a crafted location parameter that redirects COPY INTO in DataFrameWriter, and a backslash-single-quote bypass of normalize_path() in DataFrame.to_csv(). Rated CVSS 9.6 with a scope change; no public exploit identified at time of analysis and it is not listed in CISA KEV.

Technical ContextAI

Snowpark is Snowflake's client-side developer framework; the Python SDK generates SQL that is pushed down and executed inside the Snowflake compute engine. The root cause is CWE-89 (improper neutralization of SQL elements): user-influenced values are concatenated into generated SQL rather than parameterized or safely quoted. Specifically, externally sourced database column names read through DataFrameReader.dbapi() are trusted, the location argument to DataFrameWriter write methods is not validated before being embedded in a COPY INTO source clause, and normalize_path() fails to neutralize a backslash-escaped single quote (\') so an attacker can break out of the quoted export path in DataFrame.to_csv(). Because the generated SQL executes with the session's Snowflake privileges and can reach external/source databases, injection crosses trust boundaries between the SDK user, the Snowflake account, and connected source systems.

RemediationAI

Vendor-released patch: 1.53.0 - upgrade snowpark-python to 1.53.0 or later (pip install --upgrade snowpark-python) and rebuild any pipelines that pin an older version, per the changelog at https://github.com/snowflakedb/snowpark-python/blob/main/CHANGELOG.md. Until you can upgrade, reduce exposure by not passing untrusted or attacker-influenceable values into the vulnerable APIs: avoid DataFrameReader.dbapi() against source databases whose schema/column names you do not fully control, validate or allowlist the location parameter passed to DataFrameWriter write methods rather than accepting arbitrary input, and constrain export paths given to DataFrame.to_csv() to a fixed, sanitized directory so a backslash-single-quote sequence cannot reach normalize_path(). The trade-off is reduced flexibility in dynamic ingestion/export flows, and these workarounds do not fully close the injection classes, so they are stopgaps only; additionally enforce least-privilege on the Snowflake roles used by Snowpark sessions to limit the blast radius of any residual injection.