CVE-2026-6442 Details
Description
Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent to execute arbitrary code on the local device without user consent. Exploitation is non-deterministic and model-dependent. The fix is automatically applied upon relaunch with no user action required.
A vulnerability in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed improper validation of bash commands, enabling subsequent commands to execute outside of a controlled environment. This issue could be exploited by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent to execute arbitrary code on the local device without user consent. The exploitation of this vulnerability is non-deterministic and depends on the model used.
Users of Snowflake Cortex Code CLI should update to version 1.0.25 or later. The update is automatically applied upon relaunch of the CLI.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://community.snowflake.com/s/article/PromptArmor-Report---Snowflake-Response | SNOWFLAKE | |
| https://www.promptarmor.com/ | SNOWFLAKE |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1286 | Improper Validation of Syntactic Correctness of Input | SNOWFLAKE |
Affected Products
No affected product data is available for this CVE.
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | SNOWFLAKE |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 16, 2026 | New CVE Received | SNOWFLAKE |