The Snowflake CLI uses GitPython's Diffable.diff() method which forwards **kwargs directly into git diff or diff-tree commands without invoking check_unsafe_options. Because Diffable is mixed into multiple git object classes, this exposes a broad attack surface. An attacker can supply a crafted 'other' argument such as '--output=/path/to/file' which git interprets as an option to write diff output to an arbitrary file, enabling arbitrary file overwrite at the privilege level of the process. This was verified on version 3.1.53 and affects versions >=3.4.1 <3.24.0. The vulnerability is due to missing safety checks and improper argument ordering that allows user input to be parsed as git options. The suggested fix is to add check_unsafe_options to Diffable.diff or insert a '--end-of-options' marker before user-controlled refs to prevent option injection.

An attacker able to invoke Diffable.diff() with crafted arguments can overwrite or corrupt any file accessible by the process, including sensitive files like ~/.ssh/authorized_keys or configuration files. The content written is the real diff or patch output, which is attacker-influenced. This can lead to privilege escalation or persistent compromise depending on the overwritten file. The impact is high due to arbitrary file overwrite at process privilege.

A patch is available for this vulnerability. The vendor recommends adding check_unsafe_options to the Diffable.diff method or placing a '--end-of-options' marker before user-controlled arguments to prevent option injection. Users should upgrade to a fixed version beyond 3.24.0. Until patched, avoid passing untrusted input to Diffable.diff or related methods that invoke git diff commands.