snowflake-mcp-server

The server directly executes SQL queries generated by an LLM based on user input and a glossary. This poses a significant risk if the LLM is prompted to generate malicious SQL (e.g., DROP TABLE, DELETE FROM, data exfiltration queries, or complex injections). There is no explicit validation or sanitization of the generated SQL before execution by the `run_sql` function. While environment variables are used for credentials, the execution of arbitrary LLM-generated SQL without stringent safeguards is a critical vulnerability. The `SNOWFLAKE_ROLE` might offer some protection but is not a complete solution against all malicious SQL types.