Vulnerability · Published Apr 16, 2026 · Assigned by SNOWFLAKE
CVE-2026-6442Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface
High 8.3
In plain English
A high-severity security flaw in Cortex Code CLI from Snowflake. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Official description
Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent to execute arbitrary code on the local device without user consent. Exploitation is non-deterministic and model-dependent. The fix is automatically applied upon relaunch with no user action required.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Snowflake | Cortex Code CLI | <1.0.25 |
Weakness: CWE-1286 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H