CVE-2026-13749

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-13749", "assignerOrgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "state": "PUBLISHED", "assignerShortName": "SNOWFLAKE", "dateReserved": "2026-06-29T15:59:04.347Z", "datePublished": "2026-06-29T16:02:47.000Z", "dateUpdated": "2026-06-29T16:19:21.911Z"}, "containers": {"cna": {"title": "Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection", "descriptions": [{"lang": "en", "value": "Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generated Python code, causing Snowflake CLI to execute attacker-controlled code in the local context of the user running the CLI. Successful exploitation requires the victim to run the relevant bundling or deployment workflow against attacker-controlled project content, and any resulting code runs with the privileges of that local execution context. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade."}], "affected": [{"vendor": "Snowflake", "product": "Snowflake CLI", "versions": [{"version": "2.4.0", "lessThan": "3.19.0", "versionType": "semver", "status": "affected"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-94", "description": "Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "references": [{"url": "https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory", "name": "Snowflake CLI Vulnerability Advisory"}], "providerMetadata": {"orgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "shortName": "SNOWFLAKE", "dateUpdated": "2026-06-29T16:02:47.000Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-29T16:18:51.984206Z", "id": "CVE-2026-13749", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-29T16:19:21.911Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-13749", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-29T16:18:51.984206Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-29T16:19:16.545Z"}}], "cna": {"title": "Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Snowflake", "product": "Snowflake CLI", "versions": [{"status": "affected", "version": "2.4.0", "lessThan": "3.19.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory", "name": "Snowflake CLI Vulnerability Advisory"}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generated Python code, causing Snowflake CLI to execute attacker-controlled code in the local context of the user running the CLI. Successful exploitation requires the victim to run the relevant bundling or deployment workflow against attacker-controlled project content, and any resulting code runs with the privileges of that local execution context. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "shortName": "SNOWFLAKE", "dateUpdated": "2026-06-29T16:02:47.000Z"}}}, "cveMetadata": {"cveId": "CVE-2026-13749", "state": "PUBLISHED", "dateUpdated": "2026-06-29T16:19:21.911Z", "dateReserved": "2026-06-29T15:59:04.347Z", "assignerOrgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "datePublished": "2026-06-29T16:02:47.000Z", "assignerShortName": "SNOWFLAKE"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Snowflake CLI", "vendor": "Snowflake", "versions": [{"lessThan": "3.19.0", "status": "affected", "version": "2.4.0", "versionType": "semver"}]}], "source": "412d305a-227d-44f9-a262-a31ba44f2aea"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:snowflake:snowflake_cli:*:*:*:*:*:*:*:*", "matchCriteriaId": "55523B8C-EB9F-40A0-B0B6-61703670F4A1", "versionEndExcluding": "3.19.0", "versionStartIncluding": "2.4.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generated Python code, causing Snowflake CLI to execute attacker-controlled code in the local context of the user running the CLI. Successful exploitation requires the victim to run the relevant bundling or deployment workflow against attacker-controlled project content, and any resulting code runs with the privileges of that local execution context. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade."}, {"lang": "es", "value": "La neutralizaci\u00f3n incorrecta en la plantilla de devoluci\u00f3n de llamada del procesador de anotaciones de Snowpark en versiones de Snowflake CLI anteriores a la 3.19 permiti\u00f3 la ejecuci\u00f3n de c\u00f3digo arbitrario durante el empaquetado o la implementaci\u00f3n de la aplicaci\u00f3n. Un atacante podr\u00eda explotar esto al proporcionar contenido de proyecto manipulado que se interpola en el c\u00f3digo Python generado, haciendo que Snowflake CLI ejecute c\u00f3digo controlado por el atacante en el contexto local del usuario que ejecuta la CLI. La explotaci\u00f3n exitosa requiere que la v\u00edctima ejecute el flujo de trabajo de empaquetado o implementaci\u00f3n relevante contra contenido de proyecto controlado por el atacante, y cualquier c\u00f3digo resultante se ejecuta con los privilegios de ese contexto de ejecuci\u00f3n local. La soluci\u00f3n est\u00e1 disponible en la versi\u00f3n 3.19 de Snowflake CLI, y los usuarios deben actualizar manualmente."}], "id": "CVE-2026-13749", "lastModified": "2026-10-25T21:10:00.770", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "412d305a-227d-44f9-a262-a31ba44f2aea", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13749", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-29T16:18:51.984206Z", "version": "2.0.3"}}]}, "published": "2026-06-29T16:16:39.640", "references": [{"source": "412d305a-227d-44f9-a262-a31ba44f2aea", "tags": ["Vendor Advisory"], "url": "https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory"}], "sourceIdentifier": "412d305a-227d-44f9-a262-a31ba44f2aea", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "412d305a-227d-44f9-a262-a31ba44f2aea", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.4.0,3.19.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Snowflake CLI", "source": "cna", "vendor": "Snowflake"}, "product": "snowflake_cli", "vendor": "snowflake"}], "created": "2026-06-29T17:30:06.126221+00:00", "updated": "2026-07-01T10:04:14.660879+00:00", "vendors": ["snowflake", "snowflake$PRODUCT$snowflake_cli"]}