Snowflake PHP PDO Driver vulnerabilities

2 known vulnerabilities in Snowflake PHP PDO Driver from Snowflake. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Snowflake Connector for Python: Unintended Proxy or Intermediary

  CVE-2026-86600Sep 8, 2026Snowflake

  In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configur

• 8.8 High severity

  Snowflake libsnowflakeclient: Stack-based Buffer Overflow

  CVE-2026-16870Jul 24, 2026SnowflakeEPSS 1.29%

  Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file download path could allow remote code execution on a victim host.