Snowflake Addresses GitHub Workflow Vulnerability Discovered by AI Security Tool
A critical vulnerability in Snowflake's GitHub repository was identified by Wiz Research's AI tool, Red Agent. The issue, which allowed unauthorized command execution, was discovered just five days after it was introduced, prompting immediate remediation by Snowflake.
%22%2F%3E%3Crect%20width%3D%22800%22%20height%3D%22450%22%20fill%3D%22url(%23glow)%22%2F%3E%3Ctext%20x%3D%22400%22%20y%3D%22275%22%20text-anchor%3D%22middle%22%20fill%3D%22%2360a5fa%22%20font-family%3D%22system-ui%2C-apple-system%2Csans-serif%22%20font-size%3D%22132%22%20font-weight%3D%22800%22%20letter-spacing%3D%22-6%22%20opacity%3D%220.9%22%3Ecn%3C%2Ftext%3E%3Ctext%20x%3D%22400%22%20y%3D%22318%22%20text-anchor%3D%22middle%22%20fill%3D%22%2360a5fa%22%20font-family%3D%22system-ui%2C-apple-system%2Csans-serif%22%20font-size%3D%2211%22%20font-weight%3D%22600%22%20letter-spacing%3D%223%22%20opacity%3D%220.38%22%3ECONTEXT%20NEWS%3C%2Ftext%3E%3C%2Fsvg%3E)
Wiz Research's Red Agent identified a script injection vulnerability in Snowflake's public GitHub repository, snowflakedb/snowflake-connector-net.
The vulnerability was introduced on June 18, 2026, when a pull request was merged, co-authored by GitHub's Copilot Autofix. It allowed an unauthenticated user to execute arbitrary commands by exploiting a GitHub Actions workflow.
Wiz responsibly disclosed the vulnerability to Snowflake on June 23, 2026, leading to immediate remediation, including credential rotation and a thorough audit confirming no unauthorized access.
The vulnerability was live for only five days, highlighting the need for rapid patch cycles in the face of automated security discovery.
Snowflake restored the safe coding practices in the workflow on the same day of disclosure and emphasized the importance of rigorous oversight for AI-generated code to prevent security regressions.