CVE-2026-13749

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19

Description Improper neutralization in the Snowpark annotation processor callback template allows arbitrary code execution during application bundling or deployment. An attacker can exploit this by providing crafted project content that is interpolated into generated Python code, leading the Snowflake CLI to execute attacker-controlled code within the local context and privileges of the user running the tool. This requires the victim to execute the bundling or deployment workflow using the malicious project content.

Recommendations Upgrade to Snowflake CLI version 3.19. As a temporary mitigation, stop using bundling and deployment features.