Improper handling of untrusted remote references in Snowflake CLI allows server‑side request forgery through the !source/!load directives. When a vulnerable command path processes crafted SQL content, the CLI retrieves remote URLs at runtime without restricting the destination, potentially allowing an attacker to cause the victim’s environment to issue outbound requests to internal or non‑public network locations and to fetch and execute remote SQL content in the context of the victim user’s session. The impact is limited to the privileges of that session and environment; however, unintended access to internal services or execution of foreign SQL code remains possible.

Snowflake CLI versions prior to 3.19 are affected. The vendor, Snowflake, released a fix in CLI version 3.19, which introduces an option to disable remote URL retrieval during the !source/!load operation.

The CVSS score of 4.1 indicates a moderate severity. EPSS data is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting current exploit evidence is limited. Successful exploitation requires the attacker to supply malicious content that the victim processes via a vulnerable command path, and it is constrained by the victim’s session privileges. The likely attack vector is an attacker‑controlled SQL script that the victim executes using !source/!load, which then causes the CLI to fetch data from a tampered URL and evaluate it as part of the victim’s session.