Snowflake vulnerabilities
We track 25 vulnerabilities in Snowflake products across 19 products. 25 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
Latest Snowflake vulnerabilities
- 8.1 High severity
Snowflake Connector for Python: Improper Neutralization of Special Elements used in an SQL Command
When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality in the Snowflake Connector for Python and the Snowflake Connector for Python (Universal Core) did not escape DataFrame column names before i
- 8.2 High severity
Snowflake CLI: Improper Neutralization of Special Elements used in an SQL Command
Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration
- 8.2 High severity
Snowflake Connector for Python: Unintended Proxy or Intermediary
In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configur
- 7.4 High severity
Snowflake Connector for Python: Improper Certificate Validation
Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification fa
- 8.1 High severity
Snowflake Python APIs: Improper Limitation of a Pathname to a Restricted Directory
Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path segments, and HTTP param
- 8.8 High severity
Snowflake libsnowflakeclient: Stack-based Buffer Overflow
Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file download path could allow remote code execution on a victim host.
- 9.2 Critical severity
Snowflake Connector for Python: Improper Validation of Certificate with Host Mismatch
Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-pat
- 8.3 High severity
Snowflake SQLAlchemy: External Control of File Name or Path
Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be ab
- 9.2 Critical severity
Snowflake Spark Connector: Improper Neutralization of Special Elements used in an SQL Command
Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflake) versions prior to 3.2.1 can allow attackers to exfiltrate OAuth client credentials, execute arbitrary SQL with the connector's Snowflake role, or redirect COPY operati
- 8.8 High severity
Terraform Provider for Snowflake: Improper Neutralization of Special Elements used in an SQL Command
Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially
- 9.6 Critical severity
Snowpark Python SDK: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embe
- 8.0 High severity
Snowflake CLI: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the conte
- 9.6 Critical severity
Snowflake CLI: Inclusion of Functionality from Untrusted Control Sphere
Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient rest
- 8.8 High severity
Snowflake CLI: Improper Control of Generation of Code
Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project conte
- 8.8 High severity
Snowflake CLI: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snow
- 8.3 High severity
Cortex Code CLI: Improper Validation of Syntactic Correctness of Input
Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malici
- 7.0 High severity
snowflake-connector-nodejs: Time-of-check Time-of-use (TOCTOU) Race Condition
snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads loggin
- 7.0 High severity
snowflake-connector-net: Time-of-check Time-of-use (TOCTOU) Race Condition
snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads log
- 7.8 High severity
snowflake-connector-python: Deserialization of Untrusted Data
The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP r
- 7.0 High severity
snowflake-connector-python: Improper Neutralization of Special Elements used in an SQL Command
The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function
- 7.5 High severity
snowflake-connector-net: Improper Certificate Validation
The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing applications. Snowflake recently received a report about a vulnerability in the Snowflake Connector .NET where the checks against the Certificat
- 8.8 High severity
snowflake-connector-python: Improper Neutralization of Special Elements used in a Command
The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-on(SSO) browser URL authe
- 8.8 High severity
snowflake-connector-nodejs: Improper Neutralization of Special Elements used in a Command
snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browser URL authentication in versions prior to 1.6.21. In order to exploit the potential for command injection, an attacker would need to be
- 8.8 High severity
snowflake-connector-net: Improper Neutralization of Special Elements used in a Command
snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In order to exploit the potential for command injection, an attacker would need to be successful in (1) establishi
- 7.5 High severity
snowflake-connector-python: Inefficient Regular Expression Complexity
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method