snowflakedb Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

snowflake-connector-python5 vulnerabilities
snowflake-jdbc5 vulnerabilities
snowflake-connector-net4 vulnerabilities
snowflake-connector-nodejs3 vulnerabilities
gosnowflake2 vulnerabilities
libsnowflakeclient2 vulnerabilities
pdo_snowflake1 vulnerability
snowflake-hive-metastore-connector1 vulnerability

snowflakedb vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2026-3293MEDIUM	snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts can lead to inefficient regular expression complexity. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 5fb0a… CWE-1333 CWE-400Feb 27, 2026	CVSS4.8v4.0	EPSS0.209%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-27496LOW	Snowflake JDBC Driver client-side encryption key in DEBUG logs Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver ("Driver") in versions 3.0.13 through 3.23.0 of the driver. When the logging level was set to DEBUG, the Driver would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations, and is not logged server… CWE-532Mar 13, 2025	CVSS3.3v3.1	EPSS0.118%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-24790MEDIUM	Snowflake JDBC uses insecure temporary credential cache file permissions Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver will cache temporary credentials locally in a world-readable file. This vulnerability affects versions 3.6.8 through 3.21.0. Snowflake fixed the issue in version 3.22.0. CWE-276Jan 29, 2025	CVSS4.4v3.1	EPSS0.188%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-24789HIGH	Snowflake JDBC allows an untrusted search path on Windows Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. When the EXTERNALBROWSER authentication method is used on Windows, an attacker with write access to a directory in the %PATH% can escalate their privileges to the user that runs the vulnerable JDBC Driver version. This vulnerability affects versions 3.2.3 through 3.21.0 on Windows. Snowflake… CWE-426Jan 29, 2025	CVSS7.8v3.1	EPSS0.252%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-30535HIGH	Snowflake JDBC vulnerable to command injection via SSO URL authentication Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user’s local machine would render the malicious payload, leading to a re… CWE-20 CWE-77Apr 14, 2023	CVSS7.3v3.1	EPSS1.67%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX