What’s Vulnerable › Products

Snowflake CLI vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Snowflake CLI version is affected

Latest Snowflake CLI vulnerabilities

• CVE-2026-92903 — Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings (CVSS 8.2)
• CVE-2026-13752 — Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands (CVSS 8.0)
• CVE-2026-13751 — Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load (CVSS 9.6)
• CVE-2026-13750 — Snowflake CLI Sensitive Credential Exposure Through Debug Logging (CVSS 5.5)
• CVE-2026-13749 — Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection (CVSS 8.8)
• CVE-2026-13748 — Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction (CVSS 6.3)
• CVE-2026-13746 — Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters (CVSS 5.4)
• CVE-2026-13744 — Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input (CVSS 8.8)