# CVE-2026-13744: Snowflake Snowflake CLI SQL injection in project configuration

Source: https://junglewise.ai/threats/cve-2026-13744-snowflake-snowflake-cli-sql-injection-in-project-configuration  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-29. Updated: 2026-06-29  
License: CC BY 4.0 with a link back

CVE-2026-13744 · Severity: high · CVSS 8.3 · Published 2026-06-29

Snowflake CLI is a command-line tool used by developers and data engineers to manage Snowflake data platforms. A vulnerability in versions prior to 3.19 could allow an attacker to execute unauthorized database commands if a user interacts with malicious project files or repository content. This could lead to unauthorized data access or modification within the scope of the user's active session permissions.

Technologies: [Snowflake CLI](https://junglewise.ai/threats/technologies/snowflake-cli). Vendors: [Snowflake](https://junglewise.ai/threats/vendors/snowflake).

## Quick answers

**Is CVE-2026-13744 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-13744 being exploited in the wild.

**How severe is CVE-2026-13744?** High severity, with a CVSS score of 8.3, published 29 June 2026.

**Which products and versions are affected?** Snowflake CLI 1.2.2 to 3.18.x (fixed in 3.19.0).

**Is there a fix for CVE-2026-13744?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-13744 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-13744?** Check whether you run Snowflake CLI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A SQL injection vulnerability (CWE-89) exists in Snowflake CLI due to improper neutralization of attacker-controlled content. The flaw is triggered when the CLI processes crafted repository content, project configurations, manifest data, or specification inputs. An attacker can leverage this to execute arbitrary SQL commands within the victim's Snowflake session. Exploitation requires user interaction (UI:R), specifically the victim processing the malicious content through a vulnerable command path. The impact is limited by the privileges of the active session, but the vulnerability carries a high CVSS score due to potential scope crossing (S:C). The issue is resolved in Snowflake CLI version 3.19.

## Affected products

- Snowflake Snowflake CLI 1.2.2 to 3.18.x (fixed in 3.19.0)

## Timeline

- 2026-06-29: advisory
- 2026-06-29: disclosed

## References

- [https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory](https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory)

## Related threats

- [Snowflake CLI SQL injection via improper input validation](https://junglewise.ai/threats/cve-2026-92903-snowflake-cli-sql-injection-via-improper-input-validation)
- [Snowflake CLI SQL injection in command parameters](https://junglewise.ai/threats/cve-2026-13752-snowflake-cli-sql-injection-in-command-parameters)
- [Snowflake CLI SSRF and Remote SQL Execution in SQL Reader](https://junglewise.ai/threats/cve-2026-13751-snowflake-cli-ssrf-and-remote-sql-execution-in-sql-reader)
- [Snowflake CLI sensitive information disclosure in local logs](https://junglewise.ai/threats/cve-2026-13750-snowflake-cli-sensitive-information-disclosure-in-local-logs)
- [Snowflake CLI path traversal in project file processing](https://junglewise.ai/threats/cve-2026-13748-snowflake-cli-path-traversal-in-project-file-processing)