What is CVE-2026-15067?

CVE-2026-15067 is a high-severity vulnerability in Snowflake Terraform Provider For, classified under SQL Injection. CVSS score: 8.8/10. Published 2026-07-08.

How severe is CVE-2026-15067?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Snowflake Terraform Provider For

CVE-2026-15067

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake…

Vulnerability class: SQL Injection

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Snowflake Terraform Provider For — versions 0.1.0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

412d305a-227d-44f9-a262-a31ba44f2aea

Frequently asked questions

What is CVE-2026-15067?: CVE-2026-15067 is a high-severity vulnerability in Snowflake Terraform Provider For, classified under SQL Injection. CVSS score: 8.8/10. Published 2026-07-08.
How severe is CVE-2026-15067?: High severity. CVSS v3 base score is 8.8 out of 10.