# Snowflake vulnerabilities Source: https://junglewise.ai/threats/vendors/snowflake Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/snowflake.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 23 vulnerabilities in Snowflake: 1 in the last 7 days and 8 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-123859, was published on 6 November 2026. 3 vulnerabilities in the last four weeks, up 200% on the four before (1). 8 technologies have a page of their own. ## Counts - Last 7 days: 1 - Last 30 days: 3 - Last 90 days: 8 - All time: 23 (2 critical, 0 exploited in the wild) ## About Snowflake A cloud-based data warehousing and analytics platform provider. ## Latest Snowflake vulnerabilities - [CVE-2026-123859: Snowflake Connector for Python SQL injection in write_pandas()](https://junglewise.ai/threats/cve-2026-123859-when-identifier-escaping-is-disabled-through-a-non-default) (high, CVSS 8.1, published 6 Nov 2026) - [CVE-2026-121925: Snowflake libsnowflakeclient stack buffer overflow in SAML auth](https://junglewise.ai/threats/cve-2026-121925-a-stack-based-buffer-overflow-in-libsnowflakeclient-and-the) (medium, CVSS 6.6, published 4 Nov 2026) - [CVE-2026-114456: Snowflake client drivers CORS and CSRF in externalbrowser SSO](https://junglewise.ai/threats/cve-2026-114456-multiple-snowflake-client-drivers-implementing-the-authenticator) (medium, CVSS 6.5, published 4 Nov 2026) - [CVE-2026-92903: Snowflake CLI SQL injection via improper input validation](https://junglewise.ai/threats/cve-2026-92903-snowflake-cli-sql-injection-via-improper-input-validation) (high, CVSS 8.2, published 17 Sep 2026) - [CVE-2026-86600: Snowflake drivers WORKLOAD_IDENTITY token leakage](https://junglewise.ai/threats/cve-2026-86600-snowflake-drivers-workload-identity-token-leakage) (high, CVSS 8.2, published 8 Sep 2026) - [Snowflake drivers sensitive information disclosure in logs](https://junglewise.ai/threats/duplicate-advisory-sensitive-information-written-to-logs-by-snowflake-adeece37) (medium, CVSS 6.5, published 8 Sep 2026) - [CVE-2026-86597: Snowflake drivers sensitive information insertion in logs](https://junglewise.ai/threats/cve-2026-86597-snowflake-drivers-sensitive-information-insertion-in-logs) (medium, CVSS 6.5, published 8 Sep 2026) - [CVE-2026-85525: Snowflake drivers improper OCSP response validation](https://junglewise.ai/threats/cve-2026-85525-snowflake-drivers-improper-ocsp-response-validation) (high, CVSS 7.4, published 4 Sep 2026) - [CVE-2026-19594: Snowflake Python API path traversal and parameter pollution privilege escalation](https://junglewise.ai/threats/cve-2026-19594-snowflake-python-api-path-traversal-and-parameter-pollution) (high, CVSS 8.1, published 12 Aug 2026) - [CVE-2026-16870: Snowflake libsnowflakeclient RCE and Credential Exfiltration](https://junglewise.ai/threats/cve-2026-16870-snowflake-libsnowflakeclient-rce-and-credential-exfiltration) (high, CVSS 8.8, published 24 Jul 2026) - [CVE-2026-15925: Snowflake Connector for Python improper TLS hostname verification](https://junglewise.ai/threats/cve-2026-15925-snowflake-connector-for-python-improper-tls-hostname-verification) (critical, CVSS 4, published 16 Jul 2026) - [CVE-2026-15736: Snowflake SQLAlchemy SQL injection and local file disclosure](https://junglewise.ai/threats/cve-2026-15736-snowflake-sqlalchemy-sql-injection-and-local-file-disclosure) (high, CVSS 8.3, published 14 Jul 2026) - [CVE-2026-15183: Snowflake Spark Connector multiple input validation vulnerabilities](https://junglewise.ai/threats/cve-2026-15183-snowflake-spark-connector-multiple-input-validation) (info, CVSS 9.2, published 14 Jul 2026) - [CVE-2026-15067: Snowflake Terraform Provider SQL and DDL injection](https://junglewise.ai/threats/cve-2026-15067-snowflake-terraform-provider-sql-and-ddl-injection) (high, CVSS 8.8, published 8 Jul 2026) - [CVE-2026-15062: Snowflake Snowpark Python SDK SQL injection in multiple components](https://junglewise.ai/threats/cve-2026-15062-snowflake-snowpark-python-sdk-sql-injection-in-multiple) (critical, CVSS 9.6, published 8 Jul 2026) - [CVE-2026-13752: Snowflake CLI SQL injection in command parameters](https://junglewise.ai/threats/cve-2026-13752-snowflake-cli-sql-injection-in-command-parameters) (medium, CVSS 6, published 29 Jun 2026) - [CVE-2026-13751: Snowflake CLI SSRF and Remote SQL Execution in SQL Reader](https://junglewise.ai/threats/cve-2026-13751-snowflake-cli-ssrf-and-remote-sql-execution-in-sql-reader) (medium, CVSS 4.1, published 29 Jun 2026) - [CVE-2026-13750: Snowflake CLI sensitive information disclosure in local logs](https://junglewise.ai/threats/cve-2026-13750-snowflake-cli-sensitive-information-disclosure-in-local-logs) (medium, CVSS 5.5, published 29 Jun 2026) - [CVE-2026-13749: Snowflake Snowflake CLI code injection in Snowpark annotation processor](https://junglewise.ai/threats/cve-2026-13749-snowflake-snowflake-cli-code-injection-in-snowpark-annotation) (high, CVSS 8.8, published 29 Jun 2026) - [CVE-2026-13748: Snowflake CLI path traversal in project file processing](https://junglewise.ai/threats/cve-2026-13748-snowflake-cli-path-traversal-in-project-file-processing) (medium, CVSS 6.3, published 29 Jun 2026) - [CVE-2026-13746: Snowflake CLI SQL injection in local CLI parameters](https://junglewise.ai/threats/cve-2026-13746-snowflake-cli-sql-injection-in-local-cli-parameters) (low, CVSS 3.6, published 29 Jun 2026) - [CVE-2026-13744: Snowflake Snowflake CLI SQL injection in project configuration](https://junglewise.ai/threats/cve-2026-13744-snowflake-snowflake-cli-sql-injection-in-project-configuration) (high, CVSS 8.3, published 29 Jun 2026) - [CVE-2025-24793: Snowflake Connector for Python SQL injection in write_pandas](https://junglewise.ai/threats/cve-2025-24793-snowflake-connector-for-python-sql-injection-in-write-pandas) (low, CVSS 3.1, published 29 Jan 2025) ## Most severe Snowflake vulnerabilities - [CVE-2026-15062: Snowflake Snowpark Python SDK SQL injection in multiple components](https://junglewise.ai/threats/cve-2026-15062-snowflake-snowpark-python-sdk-sql-injection-in-multiple) (critical, CVSS 9.6, published 8 Jul 2026) - [CVE-2026-15925: Snowflake Connector for Python improper TLS hostname verification](https://junglewise.ai/threats/cve-2026-15925-snowflake-connector-for-python-improper-tls-hostname-verification) (critical, CVSS 4, published 16 Jul 2026) - [CVE-2026-16870: Snowflake libsnowflakeclient RCE and Credential Exfiltration](https://junglewise.ai/threats/cve-2026-16870-snowflake-libsnowflakeclient-rce-and-credential-exfiltration) (high, CVSS 8.8, published 24 Jul 2026) - [CVE-2026-15067: Snowflake Terraform Provider SQL and DDL injection](https://junglewise.ai/threats/cve-2026-15067-snowflake-terraform-provider-sql-and-ddl-injection) (high, CVSS 8.8, published 8 Jul 2026) - [CVE-2026-13749: Snowflake Snowflake CLI code injection in Snowpark annotation processor](https://junglewise.ai/threats/cve-2026-13749-snowflake-snowflake-cli-code-injection-in-snowpark-annotation) (high, CVSS 8.8, published 29 Jun 2026) - [CVE-2026-15736: Snowflake SQLAlchemy SQL injection and local file disclosure](https://junglewise.ai/threats/cve-2026-15736-snowflake-sqlalchemy-sql-injection-and-local-file-disclosure) (high, CVSS 8.3, published 14 Jul 2026) - [CVE-2026-13744: Snowflake Snowflake CLI SQL injection in project configuration](https://junglewise.ai/threats/cve-2026-13744-snowflake-snowflake-cli-sql-injection-in-project-configuration) (high, CVSS 8.3, published 29 Jun 2026) - [CVE-2026-86600: Snowflake drivers WORKLOAD_IDENTITY token leakage](https://junglewise.ai/threats/cve-2026-86600-snowflake-drivers-workload-identity-token-leakage) (high, CVSS 8.2, published 8 Sep 2026) - [CVE-2026-92903: Snowflake CLI SQL injection via improper input validation](https://junglewise.ai/threats/cve-2026-92903-snowflake-cli-sql-injection-via-improper-input-validation) (high, CVSS 8.2, published 17 Sep 2026) - [CVE-2026-19594: Snowflake Python API path traversal and parameter pollution privilege escalation](https://junglewise.ai/threats/cve-2026-19594-snowflake-python-api-path-traversal-and-parameter-pollution) (high, CVSS 8.1, published 12 Aug 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, up 200% on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 3 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Snowflake technologies - [Snowflake CLI](https://junglewise.ai/threats/technologies/snowflake-cli): 8 vulnerabilities - [Snowflake Connector for Python](https://junglewise.ai/threats/technologies/connector-for-python): 6 vulnerabilities - [Snowflake PHP PDO Driver](https://junglewise.ai/threats/technologies/php-pdo-driver): 4 vulnerabilities - [Snowflake Libsnowflakeclient](https://junglewise.ai/threats/technologies/libsnowflakeclient): 3 vulnerabilities - [Snowflake ODBC Driver](https://junglewise.ai/threats/technologies/odbc-driver): 3 vulnerabilities - [Snowflake Go Driver](https://junglewise.ai/threats/technologies/snowflake-go-driver): 3 vulnerabilities - [Snowflake JDBC Driver](https://junglewise.ai/threats/technologies/snowflake-jdbc-driver): 3 vulnerabilities - [Snowflake Node.js Driver](https://junglewise.ai/threats/technologies/snowflake-node-js-driver): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Snowflake vulnerabilities", https://junglewise.ai/threats/vendors/snowflake, 12 November 2026.