# CVE-2026-15062: SQL Injection in Snowflake Snowpark Python SDK

> CVE-2026-15062: SQL Injection in Snowflake Snowpark Python SDK. CVSS 9.6 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-15062
Last updated: 2026-10-25T20:10:00Z

- Published: 2026-07-08 14:32 UTC · Updated: 2026-10-25 20:10 UTC · Assigner: SNOWFLAKE
- CVSS: 9.6 (CVSS 3.1) · Severity: Critical · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
- EPSS: 0.39%, 32th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-89

## Description

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database column names to escalate privileges via the DataFrameReader.dbapi() API by supplying a specially crafted location parameter to DataFrameWriter write methods to redirect a COPY INTO to an arbitrary source query, or by including a backslash-single-quote sequence in an export path to defeat the normalize\_path() sanitizer and inject SQL via DataFrame.to\_csv(). Successful exploitation may result in source database compromise, unauthorized cross-tenant data exfiltration, or unauthorized read of Snowflake account data.

## Affected vendors and products

- Snowflake: Snowpark Python SDK

## Tracked companies

- [Snowflake](https://rewindex.com/company/snowflake.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-15062)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-15062)
- [https://github.com/snowflakedb/snowpark-python/blob/main/CHANGELOG.md](https://github.com/snowflakedb/snowpark-python/blob/main/CHANGELOG.md)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-15062 · Markdown: https://rewindex.com/cve/CVE-2026-15062.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-15062 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:15:30.799Z