A vulnerability classified as critical was found in Apache Airflow Providers Snowflake up to 6.3.x. This vulnerability affects the function CopyFromExternalStageToSnowflakeOperator. The manipulation leads to sql injection.

This vulnerability was named CVE-2025-50213. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.