Sensitive Information Exposure in Snowflake CLI by Snowflake

CVE-2026-13750

What is CVE-2026-13750?

The Snowflake CLI versions prior to 3.19 have been found to expose sensitive information through the insertion of plaintext credentials into persistent local debug logs. This vulnerability allows an attacker with read access to these logs to potentially retrieve sensitive data, including passwords, tokens, or private keys, especially when these credentials are present in the affected connection context. The security issue arises from the lack of sufficient safeguards at the application level. Users are strongly recommended to upgrade to Snowflake CLI version 3.19 to mitigate this risk.

References