# Snowflake Connector for Python vulnerabilities Source: https://junglewise.ai/threats/technologies/connector-for-python Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/connector-for-python.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 6 vulnerabilities in Snowflake Connector for Python: 1 in the last 7 days and 4 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-123859, was published on 6 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 1 - Last 30 days: 2 - Last 90 days: 4 - All time: 6 (1 critical, 0 exploited in the wild) ## About Snowflake Connector for Python Python library for connecting to Snowflake data warehouse. ## Latest Snowflake Connector for Python vulnerabilities - [CVE-2026-123859: Snowflake Connector for Python SQL injection in write_pandas()](https://junglewise.ai/threats/cve-2026-123859-when-identifier-escaping-is-disabled-through-a-non-default) (high, CVSS 8.1, published 6 Nov 2026) - [CVE-2026-114456: Snowflake client drivers CORS and CSRF in externalbrowser SSO](https://junglewise.ai/threats/cve-2026-114456-multiple-snowflake-client-drivers-implementing-the-authenticator) (medium, CVSS 6.5, published 4 Nov 2026) - [CVE-2026-86597: Snowflake drivers sensitive information insertion in logs](https://junglewise.ai/threats/cve-2026-86597-snowflake-drivers-sensitive-information-insertion-in-logs) (medium, CVSS 6.5, published 8 Sep 2026) - [CVE-2026-85525: Snowflake drivers improper OCSP response validation](https://junglewise.ai/threats/cve-2026-85525-snowflake-drivers-improper-ocsp-response-validation) (high, CVSS 7.4, published 4 Sep 2026) - [CVE-2026-15925: Snowflake Connector for Python improper TLS hostname verification](https://junglewise.ai/threats/cve-2026-15925-snowflake-connector-for-python-improper-tls-hostname-verification) (critical, CVSS 4, published 16 Jul 2026) - [CVE-2025-24793: Snowflake Connector for Python SQL injection in write_pandas](https://junglewise.ai/threats/cve-2025-24793-snowflake-connector-for-python-sql-injection-in-write-pandas) (low, CVSS 3.1, published 29 Jan 2025) ## Most severe Snowflake Connector for Python vulnerabilities - [CVE-2026-15925: Snowflake Connector for Python improper TLS hostname verification](https://junglewise.ai/threats/cve-2026-15925-snowflake-connector-for-python-improper-tls-hostname-verification) (critical, CVSS 4, published 16 Jul 2026) - [CVE-2026-123859: Snowflake Connector for Python SQL injection in write_pandas()](https://junglewise.ai/threats/cve-2026-123859-when-identifier-escaping-is-disabled-through-a-non-default) (high, CVSS 8.1, published 6 Nov 2026) - [CVE-2026-85525: Snowflake drivers improper OCSP response validation](https://junglewise.ai/threats/cve-2026-85525-snowflake-drivers-improper-ocsp-response-validation) (high, CVSS 7.4, published 4 Sep 2026) - [CVE-2026-86597: Snowflake drivers sensitive information insertion in logs](https://junglewise.ai/threats/cve-2026-86597-snowflake-drivers-sensitive-information-insertion-in-logs) (medium, CVSS 6.5, published 8 Sep 2026) - [CVE-2026-114456: Snowflake client drivers CORS and CSRF in externalbrowser SSO](https://junglewise.ai/threats/cve-2026-114456-multiple-snowflake-client-drivers-implementing-the-authenticator) (medium, CVSS 6.5, published 4 Nov 2026) - [CVE-2025-24793: Snowflake Connector for Python SQL injection in write_pandas](https://junglewise.ai/threats/cve-2025-24793-snowflake-connector-for-python-sql-injection-in-write-pandas) (low, CVSS 3.1, published 29 Jan 2025) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Snowflake technologies - [Snowflake CLI](https://junglewise.ai/threats/technologies/snowflake-cli): 8 vulnerabilities - [Snowflake PHP PDO Driver](https://junglewise.ai/threats/technologies/php-pdo-driver): 4 vulnerabilities - [Snowflake Libsnowflakeclient](https://junglewise.ai/threats/technologies/libsnowflakeclient): 3 vulnerabilities - [Snowflake ODBC Driver](https://junglewise.ai/threats/technologies/odbc-driver): 3 vulnerabilities - [Snowflake Go Driver](https://junglewise.ai/threats/technologies/snowflake-go-driver): 3 vulnerabilities - [Snowflake JDBC Driver](https://junglewise.ai/threats/technologies/snowflake-jdbc-driver): 3 vulnerabilities - [Snowflake Node.js Driver](https://junglewise.ai/threats/technologies/snowflake-node-js-driver): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Snowflake Connector for Python vulnerabilities", https://junglewise.ai/threats/technologies/connector-for-python, 12 November 2026.