Snowflake Snowpark Python SDK prior to version 1.53.0 has a SQL injection flaw (CWE‑89). When authenticated low‑privilege users provide column names, source database names, or export paths that are not sanitized, the SDK concatenates these values into Snowflake queries and allows execution of arbitrary SQL. The attacker can elevate privileges, read or modify data they normally cannot access, and potentially exfiltrate cross‑tenant data or compromise the entire source database.

CVE‑2026‑15062 affects all releases of the Snowpark Python SDK before version 1.53.0. The flaw is triggered when applications use DataFrameReader.dbapi(), DataFrameWriter.write(), or DataFrame.to_csv() with unsanitized arguments. Any environment that relies on these SDK features is potentially vulnerable.

The CVSS base score of 9.6 classifies the vulnerability as critical. However, the EPSS score of < 1% indicates that exploitation is currently unlikely. It is not listed in the CISA KEV catalog, suggesting no known commercial exploitation yet. The attack requires an authenticated session, limiting the surface to users with low‑privilege roles who can invoke the SDK functions. Once exploited, the attacker can escape authorization boundaries and perform unauthorized operations on the Snowflake account.