Snowflake CLI versions before 3.19 improperly restrict file path resolution, enabling path traversal. An attacker supplying crafted repository or project content can cause the CLI to read local files outside the project boundary and upload or embed their contents during deployment or SQL template processing. Successful exploitation requires victim interaction with attacker-controlled content and access to Snowflake account artifacts to retrieve exfiltrated data. The vulnerability has a CVSS 3.1 score of 6.3 (medium severity). A patch is available in Snowflake CLI version 3.19.

An attacker can read arbitrary local files on the victim's system by supplying malicious project content, potentially exposing sensitive information. The confidentiality of local files is compromised. Integrity and availability are not impacted. Exfiltration of data depends on the attacker having access to the victim's Snowflake account artifacts such as query history or uploaded stage content.

A fix is available in Snowflake CLI version 3.19. Users must manually upgrade to this version to remediate the vulnerability. Since this is a client-side tool, the vendor does not manage remediation server-side. No other mitigations are indicated.