Technical tracks for practitioners, outcomes for leaders.

securitybulletins

Stay informed about vulnerabilities that may impact Snowflake software and code that is developed and redistributed by us through open source channels. Our bulletins provide CVE IDs, severity ratings, affected components and remediation guidance to help you assess risk and take immediate action.

34 Results

Newest - Oldest

Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

CVE-2026-92903

Sensitive information written to logs by Snowflake drivers

CVE-2026-86597

Workload identity attestation generated before login host validation in Snowflake drivers

CVE-2026-86600

Improper OCSP response validation in Snowflake drivers

CVE-2026-85525

Snowflake JDBC Driver auto-configuration account validation permits credential redirection

CVE-2026-85528

Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation

CVE-2026-19594

Multiple Security Vulnerabilities in Snowflake libsnowflakeclient

CVE-2026-16870

Improper TLS Hostname Verification in Snowflake Connector for Python

CVE-2026-15925

Input Validation Vulnerabilities in Snowflake Spark Connector

CVE-2026-15183

Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

CVE-2026-15736

Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

CVE-2026-15067

SQL Injection in Snowflake Snowpark Python SDK

CVE-2026-15062

2

3