CVE-2025-50213

Apache Airflow Providers Snowflake is vulnerable to a Special Element Injection (CWE-75) vulnerability in the CopyFromExternalStageToSnowflakeOperator component. The root cause is the failure to sanitize special elements within table and stage parameters, which can lead to SQL injection . An atta...

CVE-2026-81930

The Apache Airflow Snowflake provider fails to validate the account and region fields before interpolating them into request URLs. An attacker can provide values containing /, ?, or # to demote the intended domain to a path, query, or fragment, allowing them to control the request host. This enab...