CVE-2026-13751— Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load
Quick assessment
Affected
Snowflake Snowflake CLI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Snowflake CLI是美国Snowflake公司的一个命令行工具，用于管理云计算环境中的数据仓库任务。 Snowflake CLI 3.19.0之前版本存在安全漏洞，该漏洞源于对不受信任的远程引用处理不当，导致服务器端请求伪造。SQL语句读取器的!source/!load指令可引用运行时所检索的远程URL，且对请求目标限制不足。通过提供经脆弱命令路径处理的恶意SQL内容，攻击者可导致受害者环境向内部或非公开网络位置发起非预期出站请求，并可在受害者用户会话环境中检索和执行远程SQL内容。
Possible ATT&CK Techniques 2 AI
T1071 · Application Layer Protocol T1059 · Command and Scripting InterpreterAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Snowflake | Snowflake CLI | 3.6.0< 3.19.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-13751
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load
Source: CVE Program / CVE List V5
Vulnerability Description
Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient restriction on the request destination. By supplying crafted SQL content processed through a vulnerable command path, an attacker could cause the victim's environment to issue unintended outbound requests to internal or otherwise non-public network locations, and could cause remote SQL content to be retrieved and executed in the context of the victim user's session. Successful exploitation requires the victim to process attacker-controlled content through a vulnerable command path and is limited by the privileges available to that session and environment. The fix is available in Snowflake CLI version 3.19, which adds an option to disable remote URL retrieval.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
Snowflake CLI 软件供应链问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Snowflake CLI是美国Snowflake公司的一个命令行工具，用于管理云计算环境中的数据仓库任务。 Snowflake CLI 3.19.0之前版本存在安全漏洞，该漏洞源于对不受信任的远程引用处理不当，导致服务器端请求伪造。SQL语句读取器的!source/!load指令可引用运行时所检索的远程URL，且对请求目标限制不足。通过提供经脆弱命令路径处理的恶意SQL内容，攻击者可导致受害者环境向内部或非公开网络位置发起非预期出站请求，并可在受害者用户会话环境中检索和执行远程SQL内容。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Snowflake | Snowflake CLI | 3.6.0 ~ 3.19.0 | - |
|
II. Public POCs for CVE-2026-13751
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-13751
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-13751 (1)
Same Patch Batch · Snowflake · 2026-06-29 · 7 CVEs total
| CVE-2026-13749 | 8.8 HIGH | Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injectio |
| CVE-2026-13744 | 8.3 HIGH | Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input |
| CVE-2026-13748 | 6.3 MEDIUM | Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restri |
| CVE-2026-13752 | 6.0 MEDIUM | Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creati |
| CVE-2026-13750 | 5.5 MEDIUM | Snowflake CLI Sensitive Credential Exposure Through Debug Logging |
| CVE-2026-13746 | 3.6 LOW | Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters |
IV. Related Vulnerabilities
Same product: Snowflake CLI
-
CVE-2026-92903
Improper Input Validation in Snowflake CLI Versions Allow Un -
CVE-2026-13752
Snowflake CLI SQL Injection Through Improper Neutralization -
CVE-2026-13750
Snowflake CLI Sensitive Credential Exposure Through Debug Lo -
CVE-2026-13749
Snowflake CLI Arbitrary Code Execution via Snowpark Annotati -
CVE-2026-13748
Snowflake CLI Arbitrary Local File Read and Exfiltration Thr
Same vendor: Snowflake
-
CVE-2026-92903
Improper Input Validation in Snowflake CLI Versions Allow Un -
CVE-2026-86600
Workload identity attestation generated before login host va -
CVE-2026-86597
Sensitive information written to logs by Snowflake drivers -
CVE-2026-85528
Snowflake JDBC Driver auto-configuration account validation -
CVE-2026-85525
Improper OCSP response validation in Snowflake drivers
Same weakness: CWE-918
-
CVE-2026-59970
Tandoor Recipes: Blind SSRF via AI provider URL (api_base) -
CVE-2026-111720
fish-island-backend through commit 7c61b78 SSRF via /api/web -
CVE-2026-111663
Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutat -
CVE-2026-111662
Chaskiq through 2.0.3 Unauthenticated SSRF via /oembed Endpo -
CVE-2026-102923
SparkyFitness: SSRF via unvalidated custom_url in AI service
V. Comments for CVE-2026-13751
No comments yet