Snowflake Cli
Snowflake · 8 CVEs
Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQ…
Sep 17, 2026
Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Comma…
Jun 29, 2026
Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load
Jun 29, 2026
Snowflake CLI Sensitive Credential Exposure Through Debug Logging
Jun 29, 2026
Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection
Jun 29, 2026
Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction
Jun 29, 2026
Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters
Jun 29, 2026
Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input
Jun 29, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-92903 | Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings | HIGH | 0.19% | Sep 17, 2026 |
| CVE-2026-13752 | Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands | HIGH | 0.33% | Jun 29, 2026 |
| CVE-2026-13751 | Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load | CRITICAL | 0.20% | Jun 29, 2026 |
| CVE-2026-13750 | Snowflake CLI Sensitive Credential Exposure Through Debug Logging | MEDIUM | 0.15% | Jun 29, 2026 |
| CVE-2026-13749 | Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection | HIGH | 0.54% | Jun 29, 2026 |
| CVE-2026-13748 | Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction | MEDIUM | 0.18% | Jun 29, 2026 |
| CVE-2026-13746 | Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters | MEDIUM | 0.22% | Jun 29, 2026 |
| CVE-2026-13744 | Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input | HIGH | 0.46% | Jun 29, 2026 |
Showing 1 to 8 of 8 CVEs