Is CVE-2026-13744 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-13744 being exploited in the wild.

How severe is CVE-2026-13744?

High severity, with a CVSS score of 8.3, published 29 June 2026.

Which products and versions are affected?

Snowflake CLI 1.2.2 to 3.18.x (fixed in 3.19.0).

Is there a fix for CVE-2026-13744?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-13744 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-13744?

Check whether you run Snowflake CLI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-13744: Snowflake Snowflake CLI SQL injection in project configuration

CVE-2026-13744 · Severity: high · CVSS 8.3 · Published 2026-06-29

Snowflake CLI is a command-line tool used by developers and data engineers to manage Snowflake data platforms. A vulnerability in versions prior to 3.19 could allow an attacker to execute unauthorized database commands if a user interacts with malicious project files or repository content. This could lead to unauthorized data access or modification within the scope of the user's active session permissions.

Technologies: Snowflake CLI. Vendors: Snowflake.

Quick answers

Is CVE-2026-13744 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-13744 being exploited in the wild.
How severe is CVE-2026-13744?: High severity, with a CVSS score of 8.3, published 29 June 2026.
Which products and versions are affected?: Snowflake CLI 1.2.2 to 3.18.x (fixed in 3.19.0).
Is there a fix for CVE-2026-13744?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-13744 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-13744?: Check whether you run Snowflake CLI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A SQL injection vulnerability (CWE-89) exists in Snowflake CLI due to improper neutralization of attacker-controlled content. The flaw is triggered when the CLI processes crafted repository content, project configurations, manifest data, or specification inputs. An attacker can leverage this to execute arbitrary SQL commands within the victim's Snowflake session. Exploitation requires user interaction (UI:R), specifically the victim processing the malicious content through a vulnerable command path. The impact is limited by the privileges of the active session, but the vulnerability carries a high CVSS score due to potential scope crossing (S:C). The issue is resolved in Snowflake CLI version 3.19.

Affected products

Snowflake Snowflake CLI 1.2.2 to 3.18.x (fixed in 3.19.0)

Timeline

2026-06-29: advisory
2026-06-29: disclosed

References

https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.