Varonis chained five Snowflake Postgres flaws into OS-level execution; the stock is at over 21 times sales

Snowflake▲+3.36% — Snowflake, up 3.36 percent today wants to move more of the world's data onto machines it manages, and the market pays over 21 times sales for that promise ¹³. Last week researchers showed what sits under it: a five-link privilege chain that reached OS-level control of Snowflake's managed PostgreSQL↗, disclosed days after the company put its AIM data-migration tool into public preview ¹³.

How a routine role became the host's keys

The starting point was snowflake_admin, a non-superuser role with CREATEROLE that exists so customers can manage their Snowflake Postgres instances ¹. Varonis▼−0.02% — Varonis, down 0.02 percent today Threat Labs, the research arm of the security firm Varonis, chained five documented Postgres behaviors from it. CREATEROLE let the role self-grant pg_write_all_data; that let researchers rewrite the pg_cron scheduler's job table so jobs ran as the postgres superuser ¹.

LANGUAGE internal rebound functions Snowflake had blocked by name, and archive_command, a shell hook fired on every transaction-log archive, executed their payload ¹. Full OS-level command execution, without disabling any published mitigation. Varonis reported the chain on May 31, 2026, Snowflake confirmed on June 9 that local code execution crossed an intended security boundary, and remediated server-side before the October 17 debut at BSides NYC ¹. Customers need take no action ¹.

The vendor side of the line is where the money is

Snowflake's own documentation puts the server, the virtual machine and the surrounding infrastructure on Snowflake's side of the shared-responsibility line, which is the point of buying managed Postgres ¹. The risk sits on the same side: the attack ran beneath the layer customers can see or audit. Varonis found the same bug class in AWS▼−0.72% — AWS, down 0.72 percent today RDS and Azure Cosmos for PostgreSQL, so this is a managed-Postgres problem, not a Snowflake one ¹.

What the multiple pays for

The market prices trust expensively: $4.68 billion annual revenue against a $1.33 billion net loss↗, stock compensation near 29% of quarterly revenue, over 21 times sales and a forward P/E above 100 ⁴. The company also issued $3.75 billion of zero-coupon convertible senior notes, an issuance size, not the current balance outstanding ⁴. The quarterly record shows the same shape: revenue climbing past $1.5 billion a quarter, and a GAAP net loss in every one of the last ten quarters↗ ⁵.

Who sold into the week of the disclosure

Co-founder Benoit Dageville sold 50,000 shares at $321.74 on October 21 under a 10b5-1 plan adopted April 3↗, holding 2,301,543 after ². The October 22 AIM launch did not lift the stock, which fell 2.7% to $313.96↗, then closed up 3.65% on October 23 ³⁴. Analysts still back the story: 178 of 206 rate it buy, median target $443.50 ³.

The counterpoint, stated fairly: the record shows a coordinated disclosure, a confirmed boundary crossing and a server-side fix ¹. That record supports the reading that no customer data was taken, but nothing in it establishes that, and Snowflake has not said so publicly. A clean patch can also be read the other way, as proof the managed model absorbs a bad day without the customer ever knowing.

The watch-item is plain. Investors should track whether another privilege-escalation chain is disclosed in a managed Postgres service before Snowflake's Expedition conference, where agentic AI announcements are anticipated, and whether any incident becomes customer-visible rather than quietly patched ¹⁴. The trust premium narrows the first time a fix has to be announced rather than applied.