EUVD-2026-81428
GHSA-p2xq-qfx5-xp6q
Severity by source
AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Local config/CLI input vector (AV:L) needing repo/automation access (PR:L) and pipeline execution (UI:R); injected SQL escapes the CLI to hit the Snowflake account (S:C, C/I/A:H).
Primary rating from Vendor (SNOWFLAKE).
CVSS VectorVendor: SNOWFLAKE
Lifecycle Timeline
4DescriptionCVE.org
Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can cause Snowflake CLI to execute attacker-controlled SQL statements in the context of the victim's Snowflake session and active role. Successful exploitation requires either write or pull-request access to a project repository whose CI/CD pipeline runs Snowflake CLI under an elevated service account role, or the ability to supply untrusted input to CLI-wrapping automation. Impact is limited by the privileges held by the configured Snowflake role at execution time. The fix is available in Snowflake CLI version 3.27.0, which also addresses several additional security findings. Users must manually upgrade.
AnalysisAI
SQL injection in Snowflake CLI versions prior to 3.27.0 lets an attacker who can plant a malicious project configuration file (for example snowflake.yml) or feed untrusted input into CLI-wrapping automation run arbitrary attacker-controlled SQL - including chained multi-statement queries - inside the victim's Snowflake session and under the privileges of the active role. The weakness is rated High (CVSS 3.1 base 8.2, AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H), reflecting a local attack vector, a requirement for repo write/pull-request access or equivalent automation input control, and user interaction since the CLI must actually be executed. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires ONE of two concrete preconditions named in the advisory: (1) write or pull-request access to a project repository whose CI/CD pipeline runs Snowflake CLI under an elevated Snowflake service-account role, letting the attacker plant a malicious snowflake.yml project configuration file; or (2) the ability to feed untrusted input into automation that wraps Snowflake CLI via command-line input. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H = 8.2 High) is internally consistent with the description and I broadly agree with it. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is a manual upgrade to Snowflake CLI 3.27.0, which resolves this SQL injection along with several other security findings - note that the CLI does not auto-update, so the upgrade must be explicitly applied to every developer workstation, container image, and CI/CD runner, and the affected version should be pinned out of build definitions. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Snowflake CLI installations and CI/CD jobs, identify any version below 3.27.0, temporarily restrict write access to repositories and pull requests that define snowflake.yml or other CLI project files, and enforce least-privilege Snowflake roles for CLI service accounts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today