CVE-2026-13750 describes a vulnerability in Snowflake CLI versions before 3.19 where sensitive information, including passwords, tokens, or private key material, is inserted into persistent local debug log files in plaintext. An attacker with read access to these local logs could obtain these credentials without needing additional application-level access. Exploitation requires that the credentials be present in the connection context and that the attacker can access the local environment's log files. The issue is resolved in Snowflake CLI version 3.19, which users must upgrade to manually.

The vulnerability allows exposure of sensitive credentials stored in local debug logs, potentially leading to credential compromise if an attacker can read these logs. This could result in unauthorized access to Snowflake resources or other systems using those credentials. There is no indication of remote exploitation without local access, and no known exploits in the wild have been reported.

A fix is available in Snowflake CLI version 3.19. Users should manually upgrade to version 3.19 or later to prevent sensitive information from being logged in plaintext. Since this is a client-side issue, upgrading the CLI is necessary to mitigate the vulnerability. No additional vendor advisory states otherwise.