Technical tracks for practitioners, outcomes for leaders.

securitybulletins

Stay informed about vulnerabilities that may impact Snowflake software and code that is developed and redistributed by us through open source channels. Our bulletins provide CVE IDs, severity ratings, affected components and remediation guidance to help you assess risk and take immediate action.

34 Results

Newest - Oldest

Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

SEP. 17, 2026

CVE-2026-92903

Workload identity attestation generated before login host validation in Snowflake drivers

SEP. 8, 2026

CVE-2026-86600

Sensitive information written to logs by Snowflake drivers

SEP. 8, 2026

CVE-2026-86597

Snowflake JDBC Driver auto-configuration account validation permits credential redirection

SEP. 4, 2026

CVE-2026-85528

Improper OCSP response validation in Snowflake drivers

SEP. 4, 2026

CVE-2026-85525

Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation

AUG. 12, 2026

CVE-2026-19594

Multiple Security Vulnerabilities in Snowflake libsnowflakeclient

JUL. 24, 2026

CVE-2026-16870

Improper TLS Hostname Verification in Snowflake Connector for Python

JUL. 16, 2026

CVE-2026-15925

Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

JUL. 14, 2026

CVE-2026-15736

Input Validation Vulnerabilities in Snowflake Spark Connector

JUL. 14, 2026

CVE-2026-15183

Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

JUL. 8, 2026

CVE-2026-15067

SQL Injection in Snowflake Snowpark Python SDK