Snowflake Cortex Code CLI Improper Command Validation Vulnerability Allowing Arbitrary Code Execution

A vulnerability in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed improper validation of bash commands, enabling subsequent commands to execute outside of a controlled environment. This issue could be exploited by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent to execute arbitrary code on the local device without user consent. The exploitation of this vulnerability is non-deterministic and depends on the model used.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code on the local device where the Snowflake Cortex Code CLI is running.

Remediation

Users of Snowflake Cortex Code CLI should update to version 1.0.25 or later. The update is automatically applied upon relaunch of the CLI.