Snowflake Snowflake CLI vulnerabilities

Newest CVEs

• CVE-2026-92903

  Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

  Snowflake · Snowflake CLI

  High8.2
• CVE-2026-13752

  Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands

  Snowflake · Snowflake CLI

  Medium6.0
• CVE-2026-13751

  Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load

  Snowflake · Snowflake CLI

  Medium4.1
• CVE-2026-13750

  Snowflake CLI Sensitive Credential Exposure Through Debug Logging

  Snowflake · Snowflake CLI

  Medium5.5
• CVE-2026-13749

  Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection

  Snowflake · Snowflake CLI

  High8.8
• CVE-2026-13748

  Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction

  Snowflake · Snowflake CLI

  Medium6.3
• CVE-2026-13746

  Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters

  Snowflake · Snowflake CLI

  Low3.6
• CVE-2026-13744

  Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input

  Snowflake · Snowflake CLI

  High8.3