This vulnerability in Snowflake CLI versions before 3.27.0 involves improper neutralization of special elements in SQL commands, leading to SQL injection. Unsanitized user-controlled values can be interpolated into multi-statement SQL queries executed by the CLI. Attackers with write or pull-request access to repositories whose CI/CD pipelines invoke Snowflake CLI under elevated roles, or those able to supply untrusted input to CLI automation, can execute arbitrary SQL statements in the context of the victim's Snowflake session and role. The severity is high (CVSS 8.2) with potential full confidentiality, integrity, and availability impact depending on role privileges. The vendor has released version 3.27.0 containing the fix and additional security improvements. Users must upgrade manually to remediate this issue.

Successful exploitation allows execution of attacker-controlled SQL statements within the victim's Snowflake session and active role, potentially leading to full compromise of data confidentiality, integrity, and availability depending on the privileges of the Snowflake role used at execution time. The attack surface is limited to scenarios where attackers can influence input to Snowflake CLI running under elevated privileges, such as CI/CD pipelines with service account roles.

A fix is available in Snowflake CLI version 3.27.0. Users must manually upgrade to this version or later to remediate the vulnerability. No other mitigations are indicated by the vendor advisory.