Skip to content
Snowflake vulnerabilities
Newest
-
snowflake connector for python, connector for python (universal core) +1 more
SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)
CVE-2026-123859
8.1 High
-
snowflake libsnowflakeclient, php pdo driver +1 more
Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver
CVE-2026-121925
6.6 Medium
-
snowflake connector for .net, connector for python, go driver +7 more +9 more
Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers
CVE-2026-114456
6.5 Medium
-
snowflake cli
Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings
CVE-2026-92903
8.2 High
-
snowflake connector for .net, connector for python, go driver +7 more +9 more
Workload identity attestation generated before login host validation in Snowflake drivers
CVE-2026-86600
8.2 High
-
snowflake connector for python, go driver, jdbc driver +5 more +7 more
Sensitive information written to logs by Snowflake drivers
CVE-2026-86597
Fix available
6.5 Medium
-
snowflake jdbc driver, jdbc driver (fips), jdbc driver (thin) +2 more
Snowflake JDBC Driver auto-configuration account validation permits credential redirection
CVE-2026-85528
5.3 Medium
-
snowflake connector for python, go driver, jdbc driver +3 more +5 more
Improper OCSP response validation in Snowflake drivers
CVE-2026-85525
7.4 High
-
snowflake python apis
Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation
CVE-2026-19594
8.1 High
-
snowflake libsnowflakeclient, odbc driver, php pdo driver +2 more
Multiple Security Vulnerabilities in Snowflake libsnowflakeclient
CVE-2026-16870
8.8 High
-
snowflake connector for python
Improper TLS Hostname Verification in Snowflake Connector for Python
CVE-2026-15925
Fix available
9.2 Critical
-
snowflake sqlalchemy
Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy
CVE-2026-15736
Fix available
8.3 High
-
snowflake spark connector
Input Validation Vulnerabilities in Snowflake Spark Connector
CVE-2026-15183
9.2 Critical
-
snowflake terraform provider for snowflake
Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover
CVE-2026-15067
8.8 High
-
snowflake snowpark python sdk
SQL Injection in Snowflake Snowpark Python SDK
CVE-2026-15062
9.6 Critical
-
snowflake cli
Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands
CVE-2026-13752
6.0 Medium
-
snowflake cli
Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load
CVE-2026-13751
4.1 Medium
-
snowflake cli
Snowflake CLI Sensitive Credential Exposure Through Debug Logging
CVE-2026-13750
5.5 Medium
-
snowflake cli
Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection
CVE-2026-13749
8.8 High
-
snowflake cli
Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction
CVE-2026-13748
6.3 Medium
-
snowflake cli
Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters
CVE-2026-13746
3.6 Low
-
snowflake cli
Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input
CVE-2026-13744
8.3 High
-
snowflake streamlit
Streamlit Palette hashing.py weak hash
CVE-2026-10804
Fix available
2.0 Low
-
snowflake cortex code cli
Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface
CVE-2026-6442
8.3 High
-
snowflake streamlit
Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)
CVE-2026-33682
Fix available
4.7 Medium
-
snowflake jdbc, snowflakedb snowflake-jdbc +1 more
snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos
CVE-2026-3293
Fix available
4.8 Medium
-
snowflakedb libsnowflakeclient, snowflake connector for c\/c\+\+ +1 more
Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs
CVE-2025-46329
3.3 Low
-
snowflakedb libsnowflakeclient, snowflake connector for c\/c\+\+ +1 more
Snowflake Connector for C/C++ retries malformed requests
CVE-2025-46330
3.3 Low
-
snowflake connector, snowflakedb snowflake-connector-nodejs +1 more
NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file
CVE-2025-46328
Fix available
3.3 Low
-
snowflake gosnowflake
Go Snowflake Driver has race condition when checking access to Easy Logging configuration file
CVE-2025-46327
Fix available
3.3 Low
-
snowflake connector, snowflakedb snowflake-connector-net +1 more
Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file
CVE-2025-46326
Fix available
3.3 Low
-
snowflake odbc
In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL...
CVE-2025-46614
3.3 Low
-
snowflake jdbc, snowflakedb snowflake-jdbc +1 more
Snowflake JDBC Driver client-side encryption key in DEBUG logs
CVE-2025-27496
Fix available
3.3 Low
-
snowflake connector, snowflakedb snowflake-connector-python +1 more
The Snowflake Connector for Python uses insecure cache files permissions
CVE-2025-24795
Fix available
4.4 Medium
-
snowflake connector, snowflakedb snowflake-connector-python +1 more
The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache
CVE-2025-24794
Fix available
6.7 Medium
-
snowflake connector, snowflakedb snowflake-connector-python +1 more
Snowflake Connector for Python has an SQL Injection in write_pandas
CVE-2025-24793
Fix available
7.0 High
-
snowflake connector, snowflakedb snowflake-connector-net +1 more
Snowflake Connector for .NET has weak temporary files permissions
CVE-2025-24788
Fix available
5.0 Medium
-
snowflake jdbc, snowflakedb snowflake-jdbc +1 more
Snowflake JDBC uses insecure temporary credential cache file permissions
CVE-2025-24790
Fix available
4.4 Medium
-
snowflake jdbc, snowflakedb snowflake-jdbc +1 more
Snowflake JDBC allows an untrusted search path on Windows
CVE-2025-24789
Fix available
7.8 High
-
snowflake connector, snowflakedb snowflake-connector-nodejs +1 more
snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions
CVE-2025-24791
Fix available
4.4 Medium
-
snowflake jdbc
Snowflake JDBC Security Advisory
CVE-2024-43382
Fix available
5.9 Medium
-
snowflake connector, snowflakedb snowflake-connector-python +1 more
Snowflake Connector for Python has sensitive data in logs
CVE-2024-49750
Fix available
5.5 Medium
-
snowflake streamlit
Streamlit Path Traversal Security Vulnerability on Windows
CVE-2024-42474
Fix available
5.9 Medium
-
snowflake hive metastore connector, snowflakedb snowflake-hive-metastore-connector +1 more
Elevation of privilege in Snowflake Hive MetaStore Connector Helper script
CVE-2024-28851
4.0 Medium
-
snowflake connector, snowflakedb snowflake-connector-net +1 more
Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)
CVE-2023-51662
Fix available
6.0 Medium
-
snowflake connector, snowflakedb snowflake-connector-net +1 more
Snowflake Connector vulnerable to Command Injection
CVE-2023-34230
Fix available
7.3 High
-
snowflake connector, snowflakedb snowflake-connector-python +1 more
Snowflake Python Connector vulnerable to Command Injection
CVE-2023-34233
Public exploitFix available
7.3 High
-
snowflake connector, snowflakedb snowflake-connector-nodejs +1 more
Snowflake NodeJS Driver vulnerable to Command Injection
CVE-2023-34232
Fix available
7.3 High
-
snowflake gosnowflake
Snowflake Golang Driver vulnerable to Command Injection
CVE-2023-34231
Fix available
7.3 High
-
snowflake jdbc, snowflakedb snowflake-jdbc +1 more
Snowflake JDBC vulnerable to command injection via SSO URL authentication
CVE-2023-30535
Fix available
7.3 High
- Show olderLoading…