Improper Neutralization in Snowpark CLI Annotation Processor

Executive Summary

This vulnerability exists in the Snowpark annotation processor callback template of Snowflake CLI versions prior to 3.19. It involves improper neutralization, which allows an attacker to execute arbitrary code during the application bundling or deployment process.

An attacker can exploit this by providing specially crafted project content that gets interpolated into generated Python code. This causes the Snowflake CLI to run attacker-controlled code within the local user's execution context.

For the attack to succeed, the victim must run the bundling or deployment workflow on the attacker-controlled project content. The malicious code then executes with the same privileges as the user running the CLI.

The issue is fixed in Snowflake CLI version 3.19, and users need to upgrade manually to mitigate this vulnerability.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have severe impacts because it allows an attacker to execute arbitrary code on your system with the privileges of the user running the Snowflake CLI.

• Compromise of local system integrity and confidentiality.
• Potential unauthorized access to sensitive data accessible by the user.
• Execution of malicious actions such as installing malware, modifying files, or disrupting services.

The attack requires the user to run the vulnerable workflow on attacker-controlled content, so social engineering or supply chain attacks could be vectors.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should immediately upgrade the Snowflake CLI to version 3.19 or later, where the issue has been fixed.

Additionally, avoid running bundling or deployment workflows against project content that could be attacker-controlled, as exploitation requires such conditions.

Useful 0 Not Useful 0