TI-2025-18507 Aliases CVE-2025-24790 GHSA-33g6-495w-v8j2

Snowflake JDBC uses insecure temporary credential cache file permissions

LOW 24CWE-276Published 2025-01-29 · Updated 2025-02-12

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver will cache temporary credentials locally in a world-readable file. This vulnerability affects versions 3.6.8 through 3.21.0. Snowflake fixed the issue in version 3.22.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00191 8th percentileScored 2026-11-07

Fix Fixed snowflake-jdbc (snowflakedb): 3.22.0net.snowflake:snowflake-jdbc (Maven): 3.22.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Snowflake	snowflake-jdbc	3.6.8 to before 3.22.0	3.22.0	Patch available	CNA
—	net.snowflake:snowflake-jdbc (Maven)	3.6.8 to before 3.22.0	3.22.0	Patch available	GHSA-33g6-495w-v8j2

snowflake-jdbc VendorSnowflake Affected 3.6.8 to before 3.22.0 Fixed in 3.22.0 Patch available CNA
net.snowflake:snowflake-jdbc (Maven) Vendor— Affected 3.6.8 to before 3.22.0 Fixed in 3.22.0 Patch available GHSA-33g6-495w-v8j2

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:snowflake:snowflake_jdbc::::::::	3.6.8 to before 3.22.0	Vulnerable	Snowflake
cpe:2.3:o:linux:linux_kernel:-:::::::*	not specified by NVD	Running on	Linux

cpe:2.3:a:snowflake:snowflake_jdbc:*:*:*:*:*:*:*:* Versions 3.6.8 to before 3.22.0 Vulnerable ·Snowflake
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux

Remediation

Fix · CNA snowflake-jdbc (snowflakedb) Fixed in 3.22.0
Fix · GHSA-33g6-495w-v8j2 net.snowflake:snowflake-jdbc (Maven) Fixed in 3.22.0 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2025-24790
2026-10-03 Alias added: GHSA-33g6-495w-v8j2

References

Patch 1

https://github.com/snowflakedb/snowflake-jdbc/commit/9e1a5acf12406b16c4780ca013f4c4db48b74b59

Advisory 2

Other 1

https://github.com/snowflakedb/snowflake-jdbc

TI-2026-02844 snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos CVSS 4.0MEDIUM 4.8
TI-2023-14370 Snowflake JDBC vulnerable to command injection via SSO URL authentication CVSS 3.1HIGH 8.8
TI-2025-18506 Snowflake JDBC allows an untrusted search path on Windows CVSS 3.1HIGH 7.8
TI-2024-29031 Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting… CVSS 3.1MEDIUM 5.9
TI-2025-20331 Snowflake JDBC Driver client-side encryption key in DEBUG logs CVSS 3.1LOW 3.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences