Executive Summary
Wiz Research identified a critical script injection vulnerability in the Snowflake .NET connector repository (snowflakedb/snowflake-connector-net) that allowed unauthenticated users to execute arbitrary commands within a GitHub Actions runner. The vulnerability was introduced on June 18, 2026, through a commit co-authored by GitHub Copilot Autofix, which replaced a secure input handling pattern with direct string interpolation.
During proof-of-concept testing, an autonomous AI agent ('Red Agent') exploited the flaw by submitting a crafted GitHub issue title, successfully exfiltrating internal Jira credentials belonging to a QA account. These credentials provided read access to engineering, security compliance, and bug bounty tracking projects. Snowflake remediated the vulnerability on the same day it was disclosed (June 23, 2026) and confirmed through audit logs that no unauthorized third-party access occurred during the five-day exposure window.