A critical vulnerability in the Snowflake Cortex Code CLI allows for arbitrary code execution on local devices, posing a severe risk to development environments.

This flaw involves improper validation of bash commands within the CLI tool, which allows attacker-supplied commands to break out of the intended sandbox environment. The vulnerability can be triggered by an unauthenticated attacker through the processing of untrusted content, such as a malicious repository.

The ability for an attacker to execute arbitrary code on a local machine provides a path to full system compromise, including the theft of credentials, access to local files, and potential pivot points into internal networks. Given the high CVSS score of 8.3, this vulnerability represents a significant security risk to organizations using the affected CLI tool for development workflows. The potential for unauthorized access to sensitive proprietary code and infrastructure credentials makes this a high-priority remediation item.

Immediate Action: Ensure the Snowflake Cortex Code CLI is updated to version 1.0.25 or later, as the fix is automatically applied upon relaunching the application.

Proactive Monitoring: Review local device logs and monitor for unexpected child processes spawned by the CLI agent that deviate from standard operational patterns.

Compensating Controls: Restrict the use of the CLI tool to trusted repositories only and utilize endpoint detection and response solutions to identify and block unauthorized shell command execution.

Public Exploit Available: No

Organizations should treat this vulnerability with high urgency due to the potential for arbitrary code execution. Since the remediation is automated upon relaunch, administrators should enforce a mandatory restart of the CLI agent across all development environments to ensure the patch is applied immediately.