Executive brief
Snowflake CLI, a command-line tool used by developers to manage Snowflake data platforms, is vulnerable to a file exposure flaw. An attacker could provide a malicious project file that, when processed by a user, causes the tool to secretly read and upload sensitive files from the user's local computer to the Snowflake cloud environment. This could lead to the unauthorized exposure of private local data if an attacker has access to the victim's Snowflake account history or storage areas.
Technical details
A path traversal vulnerability (CWE-22) exists in Snowflake CLI versions prior to 3.19 due to improper restriction of file path resolution. The flaw is triggered when the CLI processes crafted repository or project content, such as SQL templates or deployment configurations, that reference files outside the intended project boundary (including via symlinks, CWE-61). An attacker can exploit this by tricking a victim into processing malicious project files, causing the CLI to read local files and upload them to Snowflake stages or embed them in query history. Remediation requires a manual upgrade to Snowflake CLI version 3.19.
Affected products
- Snowflake Snowflake CLI 0.2.2 to 3.18.x (fixed in 3.19.0)
Timeline
- 2026-06-29: advisory
- 2026-06-29: disclosed