PT-2026-53313 · Snowflake · Snowflake Cli

Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13750

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19

Description Sensitive information is inserted into log files in plaintext. This occurs when credentials, such as passwords, tokens, or private key material, are written to persistent local debug logs. An attacker with read access to the affected user's local log files can expose these credentials if they are present in the connection context.

Recommendations Upgrade to Snowflake CLI version 3.19.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2026-13750

Affected Products

Snowflake Cli

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-13750 · Security Note
• https://twitter.com/VulmonFeeds/status/2071638438261014547 · Twitter Post
• https://community.snowflake.com/s/article/Snowflake-CLI-Vulnerability-Advisory · Note