CVE-2026-19594

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-19594", "assignerOrgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "state": "PUBLISHED", "assignerShortName": "SNOWFLAKE", "dateReserved": "2026-08-12T05:09:26.445Z", "datePublished": "2026-08-12T05:22:07.386Z", "dateUpdated": "2026-08-12T12:33:57.987Z"}, "containers": {"cna": {"title": "Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation", "descriptions": [{"lang": "en", "value": "Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path segments, and HTTP parameter pollution (CWE-141) via unencoded `&`/`#`/`=` characters in query string values. An attacker with access to a downstream application built on snowflake.core could exploit the path traversal by supplying `..` as an object name, causing `snowflake.core` to issue REST requests against a parent resource or exploit the parameter pollution by injecting `&`/`#`/`=` into a free-form name field to override constraints on swap, clone, or rename operations \u2014 all executed under the application's privileged session. Successful exploitation requires the attacker to control an identifier or object-name string in an application built on snowflake.core that passes it to `snowflake.core` under a higher-privileged Snowflake session (e.g., an EXECUTE AS OWNER stored procedure, Streamlit app, or Native App). The fix is available in Snowflake Python API version 1.13.0, which also addresses several additional security findings. Users must manually upgrade."}], "affected": [{"vendor": "Snowflake", "product": "Snowflake Python APIs", "versions": [{"version": "0", "lessThan": "1.13.0", "versionType": "python", "status": "affected"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-22", "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}, {"lang": "en", "cweId": "CWE-141", "description": "Improper Neutralization of Parameter/Argument Delimiters", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"}}], "references": [{"url": "https://pypi.org/project/snowflake.core/1.13.0/", "name": "Snowflake Release Notes"}], "providerMetadata": {"orgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "shortName": "SNOWFLAKE", "dateUpdated": "2026-08-12T05:22:07.386Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-12T12:33:49.665759Z", "id": "CVE-2026-19594", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T12:33:57.987Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-19594", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-12T12:33:49.665759Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T12:33:54.476Z"}}], "cna": {"title": "Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Snowflake", "product": "Snowflake Python APIs", "versions": [{"status": "affected", "version": "0", "lessThan": "1.13.0", "versionType": "python"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://pypi.org/project/snowflake.core/1.13.0/", "name": "Snowflake Release Notes"}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path segments, and HTTP parameter pollution (CWE-141) via unencoded `&`/`#`/`=` characters in query string values. An attacker with access to a downstream application built on snowflake.core could exploit the path traversal by supplying `..` as an object name, causing `snowflake.core` to issue REST requests against a parent resource or exploit the parameter pollution by injecting `&`/`#`/`=` into a free-form name field to override constraints on swap, clone, or rename operations \u2014 all executed under the application's privileged session. Successful exploitation requires the attacker to control an identifier or object-name string in an application built on snowflake.core that passes it to `snowflake.core` under a higher-privileged Snowflake session (e.g., an EXECUTE AS OWNER stored procedure, Streamlit app, or Native App). The fix is available in Snowflake Python API version 1.13.0, which also addresses several additional security findings. Users must manually upgrade."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}, {"lang": "en", "type": "CWE", "cweId": "CWE-141", "description": "Improper Neutralization of Parameter/Argument Delimiters"}]}], "providerMetadata": {"orgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "shortName": "SNOWFLAKE", "dateUpdated": "2026-08-12T05:22:07.386Z"}}}, "cveMetadata": {"cveId": "CVE-2026-19594", "state": "PUBLISHED", "dateUpdated": "2026-08-12T12:33:57.987Z", "dateReserved": "2026-08-12T05:09:26.445Z", "assignerOrgId": "412d305a-227d-44f9-a262-a31ba44f2aea", "datePublished": "2026-08-12T05:22:07.386Z", "assignerShortName": "SNOWFLAKE"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Snowflake Python APIs", "vendor": "Snowflake", "versions": [{"lessThan": "1.13.0", "status": "affected", "version": "0", "versionType": "python"}]}], "source": "412d305a-227d-44f9-a262-a31ba44f2aea"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path segments, and HTTP parameter pollution (CWE-141) via unencoded `&`/`#`/`=` characters in query string values. An attacker with access to a downstream application built on snowflake.core could exploit the path traversal by supplying `..` as an object name, causing `snowflake.core` to issue REST requests against a parent resource or exploit the parameter pollution by injecting `&`/`#`/`=` into a free-form name field to override constraints on swap, clone, or rename operations \u2014 all executed under the application's privileged session. Successful exploitation requires the attacker to control an identifier or object-name string in an application built on snowflake.core that passes it to `snowflake.core` under a higher-privileged Snowflake session (e.g., an EXECUTE AS OWNER stored procedure, Streamlit app, or Native App). The fix is available in Snowflake Python API version 1.13.0, which also addresses several additional security findings. Users must manually upgrade."}, {"lang": "es", "value": "La sanitizaci\u00f3n insuficiente de entradas en las versiones de la API de Python de Snowflake (\u2019snowflake.core\u2019) anteriores a la 1.13.0 permiti\u00f3 la escalada de privilegios de delegado confuso a trav\u00e9s de dos debilidades relacionadas: salto de ruta (CWE-22) mediante segmentos de ruta de identificador \u2019..\u2019 sin codificar, y contaminaci\u00f3n de par\u00e1metros HTTP (CWE-141) mediante caracteres \u2019&\u2019/\u2019#\u2019/\u2019=\u2019 sin codificar en los valores de la cadena de consulta. Un atacante con acceso a una aplicaci\u00f3n descendente construida sobre snowflake.core podr\u00eda explotar el salto de ruta al proporcionar \u2019..\u2019 como nombre de objeto, haciendo que \u2019snowflake.core\u2019 emita solicitudes REST contra un recurso padre o explotar la contaminaci\u00f3n de par\u00e1metros inyectando \u2019&\u2019/\u2019#\u2019/\u2019=\u2019 en un campo de nombre de formato libre para anular las restricciones en operaciones de intercambio, clonaci\u00f3n o renombramiento - todas ejecutadas bajo la sesi\u00f3n privilegiada de la aplicaci\u00f3n. La explotaci\u00f3n exitosa requiere que el atacante controle una cadena de identificador o nombre de objeto en una aplicaci\u00f3n construida sobre snowflake.core que la pasa a \u2019snowflake.core\u2019 bajo una sesi\u00f3n de Snowflake con privilegios m\u00e1s altos (por ejemplo, un procedimiento almacenado EXECUTE AS OWNER, una aplicaci\u00f3n Streamlit o una aplicaci\u00f3n nativa). La soluci\u00f3n est\u00e1 disponible en la versi\u00f3n 1.13.0 de la API de Python de Snowflake, que tambi\u00e9n aborda varios hallazgos de seguridad adicionales. Los usuarios deben actualizar manualmente."}], "id": "CVE-2026-19594", "lastModified": "2026-10-23T20:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "412d305a-227d-44f9-a262-a31ba44f2aea", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19594", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-12T12:33:49.665759Z", "version": "2.0.3"}}]}, "published": "2026-08-12T06:21:57.223", "references": [{"source": "412d305a-227d-44f9-a262-a31ba44f2aea", "url": "https://pypi.org/project/snowflake.core/1.13.0/"}], "sourceIdentifier": "412d305a-227d-44f9-a262-a31ba44f2aea", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-141"}], "source": "412d305a-227d-44f9-a262-a31ba44f2aea", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.13.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "snowflake_python_apis", "vendor": "snowflake"}], "created": "2026-08-12T13:00:03.427774+00:00", "updated": "2026-08-14T12:16:05.424476+00:00", "vendors": ["snowflake", "snowflake$PRODUCT$snowflake_python_apis"]}