Vendor

    Snowflake

    52 known vulnerabilities in products by Snowflake, 0 of them actively exploited (CISA KEV).

    Key figures

    52

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Snowflake
    HighCVE-2026-16870

    Multiple Security Vulnerabilities in Snowflake libsnowflakeclient

    		8.8
    HighCVE-2023-34231

    Snowflake Golang Driver vulnerable to Command Injection

    also in 2 other products

    		7.3
    HighCVE-2023-34232

    Snowflake NodeJS Driver vulnerable to Command Injection

    also in 1 other product

    		7.3
    HighCVE-2023-34233

    Snowflake Python Connector vulnerable to Command Injection

    also in 1 other product

    		7.3
    HighCVE-2023-30535

    Snowflake JDBC vulnerable to command injection via SSO URL authentication

    also in 1 other product

    		7.3
    MediumCVE-2022-35918

    Streamlit directory traversal vulnerability

    also in 1 other product

    		6.5
    HighCVE-2026-86600

    Workload identity attestation generated before login host validation in Snowflake drivers

    		8.2
    HighCVE-2023-34230

    Snowflake Connector vulnerable to Command Injection

    also in 1 other product

    		7.3
    HighCVE-2026-15067

    Snowflake Terraform Provider for Snowflake: SQL Injection

    		8.8
    HighCVE-2026-13749

    Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection

    		8.8
    HighCVE-2026-19594

    Snowflake Python APIs: Improper Neutralization of Parameter/Argument Delimiters

    		8.1
    CriticalCVE-2026-15062

    SQL Injection in Snowflake Snowpark Python SDK

    		9.6
    HighCVE-2026-13744

    Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input

    		8.8
    CriticalCVE-2026-15183

    Input Validation Vulnerabilities in Snowflake Spark Connector

    		—
    HighCVE-2026-15736

    Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

    		8.3
    HighCVE-2026-92903

    Snowflake CLI: SQL Injection

    		8.2
    CriticalCVE-2026-13751

    Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load

    		9.6
    CriticalCVE-2026-15925

    Improper TLS Hostname Verification in Snowflake Connector for Python

    		—
    HighCVE-2026-13752

    Snowflake CLI: SQL Injection

    		8.0
    HighCVE-2026-6442

    Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface

    		8.3
    HighCVE-2026-85525

    Improper OCSP response validation in Snowflake drivers

    		7.4
    MediumCVE-2026-86597

    Sensitive information written to logs by Snowflake drivers

    also in 1 other product

    		6.5
    MediumCVE-2026-85528

    Snowflake JDBC Driver auto-configuration account validation permits credential redirection

    		5.3
    MediumCVE-2024-42474

    Streamlit Path Traversal Security Vulnerability on Windows

    also in 1 other product

    		5.9
    MediumCVE-2026-13748

    Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction

    		6.3

    All vulnerabilities in search

    News

    Products

    Products by Snowflake
    Snowflake Cli150
    Snowflake Connector130
    Snowflake JDBC60
    Streamlit50
    Snowflake Connector For Python40
    Snowflake Jdbc Driver40
    Snowflake Jdbc Driver (fips)40
    Snowflake Jdbc Driver (thin)40
    Snowflake Go Driver30
    Snowflake Node.js Driver30
    Snowflake Odbc Driver30
    Snowflake PHP Pdo Driver30