CVE-2026-13750: snowflake cli from 3.0.0 (inclusive), before 3.19.0 (exclusive); +1 more affected products

Affected technology

snowflake cli · from 3.0.0 (inclusive), before 3.19.0 (exclusive)
snowflake

Snowflake CLI · 3.0.0 to before 3.19.0
Snowflake

Description’s affected range: versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

An attacker could exploit this by obtaining read access to the affected user's local log files, causing credentials such as passwords, tokens, or private key material to be exposed without additional application-level safeguards. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as high; integrity and availability impact as none.