CVE-2026-13748: Snowflake CLI Path Traversal Vulnerability

CVE-2026-13748 Overview

CVE-2026-13748 is a path traversal vulnerability [CWE-22] in Snowflake CLI versions prior to 3.19. The flaw stems from improper restriction of file path resolution during project and SQL template processing. An attacker who supplies crafted repository or project content can cause the CLI to read arbitrary local files and transmit their contents to Snowflake services during deployment operations. Exploitation requires the victim to process attacker-controlled project content, and data retrieval depends on subsequent access to Snowflake account artifacts such as query history or uploaded stage content. Snowflake fixed the issue in version 3.19, and users must manually upgrade.

Critical Impact
Arbitrary local file contents on a developer's workstation can be exfiltrated to Snowflake services through crafted project artifacts processed by the Snowflake CLI.

Affected Products

Snowflake CLI versions prior to 3.19
Component: snowflake:snowflake_cli
CPE: cpe:2.3:a:snowflake:snowflake_cli:*:*:*:*:*:*:*:*

Discovery Timeline

2026-06-29 - CVE-2026-13748 published to the National Vulnerability Database (NVD)
2026-06-30 - Last updated in NVD database
Advisory - Snowflake published the Snowflake CLI Vulnerability Advisory

Technical Details for CVE-2026-13748

Vulnerability Analysis

The Snowflake CLI is a command-line tool used by developers to build, deploy, and manage Snowflake objects such as Snowpark apps, Streamlit apps, and SQL scripts. During deployment and SQL template processing, the CLI resolves file references found inside project definitions and templates. Versions prior to 3.19 failed to constrain these path resolutions to the intended project boundary. As a result, references pointing outside the project directory using traversal sequences or absolute paths were accepted and dereferenced by the CLI.

Root Cause

The root cause is an improper limitation of a pathname to a restricted directory [CWE-22]. When Snowflake CLI parses repository files, project manifests, or SQL templates, it does not verify that resolved paths remain within the project root. Attacker-supplied file references escape the intended sandbox and read arbitrary readable files under the invoking user's privileges.

Attack Vector

The attack vector is local and requires user interaction. An attacker prepares a malicious repository, project template, or SQL file that references sensitive local paths such as private keys, credential files, or configuration data. When a victim clones the project and executes a Snowflake CLI command that processes the artifact, the CLI reads the referenced files and embeds or uploads their contents during deployment. The attacker then retrieves the exfiltrated data by accessing Snowflake artifacts they can reach, including query history entries or uploaded stage content in the victim's account. No detailed public exploitation code has been released for CVE-2026-13748.

Detection Methods for CVE-2026-13748

Indicators of Compromise

Snowflake CLI executions that reference file paths outside the current project directory, including absolute paths or .. traversal sequences.
Unexpected files appearing in Snowflake stages, particularly files named after local system paths such as id_rsa, .env, or config.toml.
Query history entries containing embedded content that resembles credentials, private keys, or local configuration data.

Detection Strategies

Inventory Snowflake CLI installations across developer workstations and flag any version below 3.19.
Review Snowflake QUERY_HISTORY and stage upload logs for anomalous content originating from CLI deployments.
Inspect project repositories for SQL templates and manifests that reference paths outside the project root.

Monitoring Recommendations

Enable and centralize Snowflake account audit logs, focusing on PUT operations to stages and unusual SQL template executions.
Monitor endpoints for snow CLI process executions that access files outside expected project directories.
Alert on newly created Snowflake stages containing binary or credential-like artifacts shortly after a repository clone.

How to Mitigate CVE-2026-13748

Immediate Actions Required

Upgrade Snowflake CLI to version 3.19 or later on every workstation, build agent, and CI/CD runner.
Rotate any Snowflake credentials, private keys, or secrets that may have been present on systems where untrusted projects were processed with a vulnerable CLI.
Audit Snowflake query history and stage content for evidence of exfiltrated local files.

Patch Information

The fix is available in Snowflake CLI version 3.19. The upgrade is not automatic and must be applied manually by users following the guidance in the Snowflake CLI Vulnerability Advisory.

Workarounds

Avoid running Snowflake CLI commands against untrusted repositories or project content until the upgrade is applied.
Execute Snowflake CLI operations inside isolated containers or ephemeral virtual machines that contain no sensitive files.
Restrict Snowflake CLI execution to least-privilege service accounts that lack access to workstation secrets.

bash

# Upgrade Snowflake CLI to the patched version
pip install --upgrade "snowflake-cli>=3.19"

# Verify the installed version
snow --version