CVE-2026-13752

Snowflake CLI prior to v3.19 allows SQL injection via improper neutralization of parameters in certain command paths (e.g., secret creation and SPCS service log commands). An attacker could supply crafted values through vulnerable inputs or misconfigured/mined automation to reach vulnerable param...