Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed

Wiz Research's autonomous Red Agent discovered a critical script-injection vulnerability in Snowflake's snowflake-connector-net GitHub Actions that allowed unauthenticated attackers to execute arbitrary commands by submitting specially crafted GitHub issue titles; the issue was introduced in a June 18 PR, discovered and reported on June 23, patched the same day, and Snowflake rotated the Jira token and reported no evidence of unauthorized access.