SecurityThe Hacker Newsabout 2 hours ago
Snowflake GitHub Actions Flaw Enables Command Injection
1 min read
Wiz disclosed a GitHub Actions workflow injection in Snowflake's snowflakedb/snowflake-connector-net repository, exploitable via crafted issues to run commands with Jira credentials. Snowflake merged a fix in pull request #1402 on June 23, 2026, after Wiz reported it via HackerOne. The Jira token was rotated June 24.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
