CVE-2026-13752

{
  "id": "CVE-2026-13752",
  "sourceIdentifier": "412d305a-227d-44f9-a262-a31ba44f2aea",
  "published": "2026-06-29T17:16:30.160",
  "lastModified": "2026-10-25T21:10:00.770",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the context of the user’s Snowflake session. Successful exploitation required crafted values to reach vulnerable parameters, including through socially engineered input, malicious repository configuration, or compromised automation feeding external values into the CLI, and impact is limited by the privileges assigned to the active session. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade."
    },
    {
      "lang": "es",
      "value": "La neutralización incorrecta de parámetros en versiones de Snowflake CLI anteriores a la 3.19 permitía la ejecución no intencionada de SQL. Un atacante podría explotar esto al proporcionar valores manipulados a rutas de comando vulnerables, haciendo que Snowflake CLI ejecutara SQL no intencionado en el contexto de la sesión de Snowflake del usuario. La explotación exitosa requería que los valores manipulados llegaran a parámetros vulnerables, incluyendo a través de entrada de ingeniería social, configuración de repositorio maliciosa o automatización comprometida que alimentara valores externos al CLI, y el impacto está limitado por los privilegios asignados a la sesión activa. La solución está disponible en la versión 3.19 de Snowflake CLI, y los usuarios deben actualizar manualmente."
    }
  ],
  "affected": [
    {
      "source": "412d305a-227d-44f9-a262-a31ba44f2aea",
      "affectedData": [
        {
          "vendor": "Snowflake",
          "product": "Snowflake CLI",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.1.0",
              "lessThan": "3.19.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "412d305a-227d-44f9-a262-a31ba44f2aea",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N",
          "baseScore": 6.0,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.2
      },
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "baseScore": 8.0,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-29T17:23:35.523864Z",
          "id": "CVE-2026-13752",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "412d305a-227d-44f9-a262-a31ba44f2aea",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:snowflake:snowflake_cli:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.1.0",
              "versionEndExcluding": "3.19.0",
              "matchCriteriaId": "2BF808F4-F829-462E-9AE3-BF042545C017"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory",
      "source": "412d305a-227d-44f9-a262-a31ba44f2aea",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}