Snowflake Cortex Code CLI vulnerabilities

Latest Snowflake Cortex Code CLI CVEs

Newest publication first

1. CVE-2026-6442 Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface

   Published 2026-04-16

   High·CVSS 8.3

   Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, caus...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.