Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator

Vulnerability

Overview

CVE-2025-50213 is a special element injection (SQL injection) vulnerability in the Apache Airflow Providers Snowflake package, affecting versions before 6.4.0. The flaw resides in the CopyFromExternalStageToSnowflakeOperator, where the table and stage parameters were not sanitized before being used in SQL queries. This allows an attacker to inject arbitrary SQL commands by supplying malicious input to these parameters [2].

Exploitation

Details

To exploit this vulnerability, an attacker must have the ability to define or influence the table or stage parameters of a DAG that uses the CopyFromExternalStageToSnowflakeOperator. This could be achieved through a compromised Airflow user account or by crafting a DAG that accepts external input. The fix, as shown in the commit, adds a validation function that rejects any parameter containing a semicolon (;), which is a common SQL injection delimiter [3]. The PyPA advisory confirms the injection vector and the need for input sanitization [4].

Impact

Successful exploitation could allow an attacker to execute arbitrary SQL statements against the Snowflake database, potentially leading to data exfiltration, modification, or deletion. The severity is high, as it compromises the confidentiality, integrity, and availability of the data managed by the affected Airflow instance.

Mitigation

The vulnerability is fixed in Apache Airflow Providers Snowflake version 6.4.0. Users are strongly recommended to upgrade immediately [2]. No workarounds are documented; upgrading is the only reliable mitigation. The fix introduces input validation that blocks semicolons in the affected parameters, preventing SQL injection [3].