CVE-2026-13749: Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection
Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generated Python code, causing Snowflake CLI to execute attacker-controlled code in the local context of the user running the CLI. Successful exploitation requires the victim to run the relevant bundling or deployment workflow against attacker-controlled project content, and any resulting code runs with the privileges of that local execution context. The fix is available in Snowflake CLI version 3.19, and users must manually upgrade.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Snowflake CLIto a version that resolves this vulnerability.Fixed in 3.19
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13749?
The severity of CVE-2026-13749 is rated high with a score of 8.8.
How do I fix CVE-2026-13749?
To fix CVE-2026-13749, update Snowflake CLI to version 3.19 or later.
What type of vulnerability is CVE-2026-13749?
CVE-2026-13749 is classified as a code injection vulnerability.
What impact does CVE-2026-13749 have on Snowflake CLI?
CVE-2026-13749 allows arbitrary code execution during application bundling or deployment.
Can CVE-2026-13749 affect any version of Snowflake CLI?
Yes, CVE-2026-13749 affects versions of Snowflake CLI prior to 3.19.