Executive brief
Snowflake JDBC allows an untrusted search path on Windows
Affected products
- Maven net.snowflake:snowflake-jdbc
Junglewise Threat Intelligence
CVE-2025-24789: Snowflake JDBC allows an untrusted search path on Windows
CVE-2025-24789 · Severity: low · CVSS 3.1 · Published 2025-01-29
Technologies: net.snowflake:snowflake-jdbc (Maven). Vendors: Maven.
Related threats
- Snowflake JDBC Driver is Vulnerable to Uncontrolled Resource Consumption through SdkProxyRoutePlanner
- Snowflake JDBC Driver client-side encryption key in DEBUG logs
- Snowflake JDBC uses insecure temporary credential cache file permissions
- Snowflake JDBC Security Advisory
- Snowflake JDBC vulnerable to command injection via SSO URL authentication