Snowflake CLI vulnerabilities
5 known vulnerabilities in Snowflake CLI from Snowflake. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.2 High severity
Snowflake CLI: Improper Neutralization of Special Elements used in an SQL Command
Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration
- 8.0 High severity
Snowflake CLI: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the conte
- 9.6 Critical severity
Snowflake CLI: Inclusion of Functionality from Untrusted Control Sphere
Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient rest
- 8.8 High severity
Snowflake CLI: Improper Control of Generation of Code
Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project conte
- 8.8 High severity
Snowflake CLI: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snow