CVE-2026-13744

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-13744", "assignerOrgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "state": "PUBLISHED", "assignerShortName": "SNOWFLAKE", "dateReserved": "2026-06-29T15:29:41.713Z", "datePublished": "2026-06-29T15:40:47.721Z", "dateUpdated": "2026-06-29T16:23:42.013Z"}, "containers": {"cna": {"title": "Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input", "descriptions": [{"lang": "en", "value": "Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snowflake CLI to execute unintended SQL in the context of the victim user's Snowflake session. Successful exploitation requires the victim to process attacker-controlled content through a vulnerable command path and is limited by the privileges assigned to that session. The fix is available in Snowflake CLI version 3.19. Users must manually upgrade."}], "affected": [{"vendor": "Snowflake", "product": "Snowflake CLI", "versions": [{"version": "1.2.2", "lessThan": "3.19.0", "versionType": "semver", "status": "affected"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-89", "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H"}}], "references": [{"url": "https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory", "name": "Snowflake CLI Vulnerability Advisory"}], "providerMetadata": {"orgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "shortName": "SNOWFLAKE", "dateUpdated": "2026-06-29T15:40:47.721Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-29T16:23:32.847749Z", "id": "CVE-2026-13744", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-29T16:23:42.013Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-13744", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-29T16:23:32.847749Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-29T16:23:36.497Z"}}], "cna": {"title": "Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Snowflake", "product": "Snowflake CLI", "versions": [{"status": "affected", "version": "1.2.2", "lessThan": "3.19.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory", "name": "Snowflake CLI Vulnerability Advisory"}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snowflake CLI to execute unintended SQL in the context of the victim user's Snowflake session. Successful exploitation requires the victim to process attacker-controlled content through a vulnerable command path and is limited by the privileges assigned to that session. The fix is available in Snowflake CLI version 3.19. Users must manually upgrade."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "shortName": "SNOWFLAKE", "dateUpdated": "2026-06-29T15:40:47.721Z"}}}, "cveMetadata": {"cveId": "CVE-2026-13744", "state": "PUBLISHED", "dateUpdated": "2026-06-29T16:23:42.013Z", "dateReserved": "2026-06-29T15:29:41.713Z", "assignerOrgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "datePublished": "2026-06-29T15:40:47.721Z", "assignerShortName": "SNOWFLAKE"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Snowflake CLI", "vendor": "Snowflake", "versions": [{"lessThan": "3.19.0", "status": "affected", "version": "1.2.2", "versionType": "semver"}]}], "source": "412d305a-227d-44f9-a262-a31ba44f2aea"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:snowflake:snowflake_cli:*:*:*:*:*:*:*:*", "matchCriteriaId": "4C8AAED4-B302-4026-9650-976672DDEB0B", "versionEndExcluding": "3.19.0", "versionStartIncluding": "1.2.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snowflake CLI to execute unintended SQL in the context of the victim user's Snowflake session. Successful exploitation requires the victim to process attacker-controlled content through a vulnerable command path and is limited by the privileges assigned to that session. The fix is available in Snowflake CLI version 3.19. Users must manually upgrade."}, {"lang": "es", "value": "La neutralizaci\u00f3n inadecuada de contenido controlado por el atacante en versiones de Snowflake CLI anteriores a la 3.19 permiti\u00f3 la ejecuci\u00f3n de SQL no intencionada. Al proporcionar contenido de repositorio manipulado, configuraci\u00f3n del proyecto, datos de manifiesto o entrada de especificaci\u00f3n, un atacante podr\u00eda hacer que Snowflake CLI ejecutara SQL no intencionada en el contexto de la sesi\u00f3n de Snowflake del usuario v\u00edctima. La explotaci\u00f3n exitosa requiere que la v\u00edctima procese contenido controlado por el atacante a trav\u00e9s de una ruta de comando vulnerable y est\u00e1 limitada por los privilegios asignados a esa sesi\u00f3n. La soluci\u00f3n est\u00e1 disponible en la versi\u00f3n 3.19 de Snowflake CLI. Los usuarios deben actualizar manualmente."}], "id": "CVE-2026-13744", "lastModified": "2026-10-25T21:10:00.770", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 6.0, "source": "412d305a-227d-44f9-a262-a31ba44f2aea", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13744", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-29T16:23:32.847749Z", "version": "2.0.3"}}]}, "published": "2026-06-29T16:16:39.260", "references": [{"source": "412d305a-227d-44f9-a262-a31ba44f2aea", "tags": ["Vendor Advisory"], "url": "https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory"}], "sourceIdentifier": "412d305a-227d-44f9-a262-a31ba44f2aea", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "412d305a-227d-44f9-a262-a31ba44f2aea", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.2.2,3.19.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Snowflake CLI", "source": "cna", "vendor": "Snowflake"}, "product": "snowflake_cli", "vendor": "snowflake"}], "created": "2026-06-29T18:00:06.130373+00:00", "updated": "2026-07-01T10:04:19.824141+00:00", "vendors": ["snowflake", "snowflake$PRODUCT$snowflake_cli"]}