Executive brief
The Snowflake Snowpark Python SDK, a library used by developers to build data applications, contains vulnerabilities that could allow users with low-level access to execute unauthorized database commands. An attacker could exploit this to bypass security restrictions, potentially leading to the theft of sensitive data across different customer accounts or full compromise of the source database. Organizations using this SDK should update to version 1.53.0 or later to protect their data and operations.
Technical details
Multiple SQL injection vulnerabilities exist in the Snowflake Snowpark Python SDK (snowpark-python) prior to version 1.53.0. The flaws stem from improper neutralization of special elements in several components: the DataFrameReader.dbapi() API (via column names), DataFrameWriter write methods (via the location parameter), and DataFrame.to_csv() (via export paths that bypass the normalize_path sanitizer). An authenticated attacker with low privileges can exploit these to execute arbitrary SQL, potentially leading to cross-tenant data exfiltration or unauthorized access to Snowflake account data. The issue is addressed in version 1.53.0.
Affected products
- Snowflake Snowpark Python SDK >= 0.1.0, < 1.53.0
Timeline
- 2026-07-08: disclosed
- 2026-07-08: advisory