VulnSocial

CVE-2026-13749Patch(snowflake / snowflake_cli)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch snowflake snowflake_cli systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generated Python code, causing Snowflake CLI to execute attacker-controlled code in the local context of the user running the CLI. Successful exploitation requires the victim to run the relevant bundling or deployment workflow against attacker-controlled project content, and any resulting code runs with the privileges of that local execution context. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade.

snowflake CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • snowflake_cli

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-06-30); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
snowflake
Products
snowflake_cli

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-30: 1Mentions · 2026-07-01: 1Patch / Workaround · 2026-06-30: 1Patch / Workaround · 2026-07-01: 1Technical Details · 2026-06-30: 1Technical Details · 2026-07-01: 106-3007-01
Signal classification1 categories
Patch
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    #CVE-2026-13749 - Critical code execution in #Snowflake CLI. Improper neutralization in Snowpark annotation processor. #CVSS 8.8. No patch available. Stop using bundling/deployment features immediately. #CVEAlert #infosec @Snowflake #devsecops more detailed info: https://www.valtersit.com/cve/CVE-2026-13749/

    Post summary

    Critical code‑execution flaw in Snowflake CLI; no patch is available yet, so users are advised to stop using bundling/deployment features until a fix is released.

    0010084
    967 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-13749 (CVSS 8.8) Arbitrary code execution flaw in Snowflake CLI <3.19 via Snowpark annotation processor. Attackers can inject malicious code during app bundling/deployment. ✅ Upgrade to v3.19 immediately #CVE #Vulnerability #PatchNow https://t.co/evzPJf59P2

    Post summary

    The tweet highlights a high‑severity CVE affecting Snowflake CLI that allows arbitrary code execution during bundling and urges users to upgrade to v3.19; no exploit code or active exploitation is mentioned.

    0000056
    56 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsnowflakesnowflake_cli---

Explore more

Back to dashboardsnowflake CVEssnowflake_cli vulnerabilities