CyberRota Analysis
AI-GeneratedThe Snowflake Snowpark Python SDK versions prior to 1.53.0 are vulnerable to SQL injection, allowing authenticated low-privilege users to execute unauthorized SQL commands. Exploitation can lead to serious consequences, including source database compromise, unauthorized data exfiltration across tenants, and unauthorized access to Snowflake account data. Organizations using this SDK should prioritize patching to mitigate the risk of exploitation and protect sensitive information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database column names to escalate privileges via the DataFrameReader.dbapi() API by supplying a specially crafted location parameter to DataFrameWriter write methods to redirect a COPY INTO to an arbitrary source query, or by including a backslash-single-quote sequence in an export path to defeat the normalize_path() sanitizer and inject SQL via DataFrame.to_csv(). Successful exploitation may result in source database compromise, unauthorized cross-tenant data exfiltration, or unauthorized read of Snowflake account data.