Snowflake Cortex AI Malware Sandbox

Overview of a vulnerability in Snowflake Cortex Code CLI that allowed malware to be installed and executed via indirect prompt injection, bypassing human-in-the-loop approval and escaping the sandbox. The report details the attack chain, affected behaviors, and the February 28, 2026 fix (CLI 1.0.25).

🔗 Full discussion: https://news.ycombinator.com/item?id=47427017