CVE-2026-6442: Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface
Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent to execute arbitrary code on the local device without user consent. Exploitation is non-deterministic and model-dependent. The fix is automatically applied upon relaunch with no user action required.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Snowflake Cortex Code CLIto a version that resolves this vulnerability.Fixed in 1.0.25
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6442?
CVE-2026-6442 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-6442?
To remediate CVE-2026-6442, update the Snowflake Cortex Code CLI to version 1.0.25 or later.
What impact does CVE-2026-6442 have on my system?
CVE-2026-6442 allows attackers to execute arbitrary commands outside the intended sandbox environment.
Which versions are affected by CVE-2026-6442?
CVE-2026-6442 affects all versions of Snowflake Cortex Code CLI prior to 1.0.25.
Is CVE-2026-6442 exploitable in a non-production environment?
Yes, CVE-2026-6442 can be exploited in any environment where the vulnerable Snowflake Cortex Code CLI is used.