Read the docs
TI-2026-59237 Aliases CVE-2026-86600GHSA-fhj9-24fm-m53p

Workload identity attestation generated before login host validation in Snowflake drivers

Priority LOW 38CWE-441Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-522.

Summary

In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configuration can cause the driver to mint a fresh attestation and send it to a host they control. The captured token can be replayed to Snowflake for its remaining lifetime in accounts where that workload identity is already registered. On Azure, the token audience is also taken from connection configuration. Combined with an attacker-controlled host, the driver can request a Managed Identity access token scoped to a non-Snowflake Azure resource and deliver it to the attacker. That path is the only case in which impact extends beyond Snowflake; it is bounded by the token lifetime and the managed identity’s permissions. Successful exploitation requires WORKLOAD_IDENTITY authentication on a workload that already has an ambient cloud identity. Patched driver versions restrict this authenticator to recognized Snowflake hosts. Users must manually upgrade.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00511 43rd percentileScored 2026-11-07
Fix Fixed Snowflake Connector for Python (Snowflake): 4.7.3Snowflake Go Driver (Snowflake): 2.2.0+8 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SnowflakeSnowflake Connector for Python3.14.1 to before 4.7.34.7.3Patch availableCNA
SnowflakeSnowflake Go Driver1.15.0 – 1.19.1—No fix listedCNA
SnowflakeSnowflake Go Driver2.0.0 to before 2.2.02.2.0Patch availableCNA
SnowflakeSnowflake JDBC Driver3.24.0 to before 4.3.44.3.4Patch availableCNA
SnowflakeSnowflake JDBC Driver (FIPS)3.24.0 to before 4.3.44.3.4Patch availableCNA
SnowflakeSnowflake JDBC Driver (Thin)3.24.0 to before 4.3.44.3.4Patch availableCNA
SnowflakeSnowflake Node.js Driver2.1.1 to before 3.3.03.3.0Patch availableCNA
SnowflakeSnowflake Connector for .NET4.7.0 to before 6.1.06.1.0Patch availableCNA
SnowflakeSnowflake ODBC Driver3.9.0 to before 3.20.03.20.0Patch availableCNA
SnowflakeSnowflake PHP PDO Driver3.6.0 to before 4.2.04.2.0Patch availableCNA
SnowflakeSnowflake Libsnowflakeclient2.2.0 to before 2.10.02.10.0Patch availableCNA
  • Snowflake Connector for Python VendorSnowflake Affected 3.14.1 to before 4.7.3 Fixed in 4.7.3 Patch available CNA
  • Snowflake Go Driver VendorSnowflake Affected 1.15.0 – 1.19.1 Fixed in — No fix listed CNA
  • Snowflake Go Driver VendorSnowflake Affected 2.0.0 to before 2.2.0 Fixed in 2.2.0 Patch available CNA
  • Snowflake JDBC Driver VendorSnowflake Affected 3.24.0 to before 4.3.4 Fixed in 4.3.4 Patch available CNA
  • Snowflake JDBC Driver (FIPS) VendorSnowflake Affected 3.24.0 to before 4.3.4 Fixed in 4.3.4 Patch available CNA
  • Snowflake JDBC Driver (Thin) VendorSnowflake Affected 3.24.0 to before 4.3.4 Fixed in 4.3.4 Patch available CNA
  • Snowflake Node.js Driver VendorSnowflake Affected 2.1.1 to before 3.3.0 Fixed in 3.3.0 Patch available CNA
  • Snowflake Connector for .NET VendorSnowflake Affected 4.7.0 to before 6.1.0 Fixed in 6.1.0 Patch available CNA
  • Snowflake ODBC Driver VendorSnowflake Affected 3.9.0 to before 3.20.0 Fixed in 3.20.0 Patch available CNA
  • Snowflake PHP PDO Driver VendorSnowflake Affected 3.6.0 to before 4.2.0 Fixed in 4.2.0 Patch available CNA
  • Snowflake Libsnowflakeclient VendorSnowflake Affected 2.2.0 to before 2.10.0 Fixed in 2.10.0 Patch available CNA

Remediation

  • Fix · CNA Snowflake Connector for Python (Snowflake) Fixed in 4.7.3
  • Fix · CNA Snowflake Go Driver (Snowflake) Fixed in 2.2.0
  • Fix · CNA Snowflake JDBC Driver (Snowflake) Fixed in 4.3.4
  • Fix · CNA Snowflake JDBC Driver (FIPS) (Snowflake) Fixed in 4.3.4
  • Fix · CNA Snowflake JDBC Driver (Thin) (Snowflake) Fixed in 4.3.4
  • Fix · CNA Snowflake Node.js Driver (Snowflake) Fixed in 3.3.0
  • Fix · CNA Snowflake Connector for .NET (Snowflake) Fixed in 6.1.0
  • Fix · CNA Snowflake ODBC Driver (Snowflake) Fixed in 3.20.0
  • Fix · CNA Snowflake PHP PDO Driver (Snowflake) Fixed in 4.2.0
  • Fix · CNA Snowflake Libsnowflakeclient (Snowflake) Fixed in 2.10.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Snowflake Connector for Python, Snowflake Go Driver and 6 more products 2.2.0, 3.20.0 and 4 more versions

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-59236 Sensitive information written to logs by Snowflake driversPriority LOW 27
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-86600
  2. 2026-10-03 Alias added: GHSA-fhj9-24fm-m53p

References

Other 8

  • TI-2022-20945 Exponential ReDoS in snowflake-connector-python leads to denial of service CVSS 3.1HIGH 7.5
  • TI-2026-02844 snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos CVSS 4.0MEDIUM 4.8
  • TI-2026-13340 Improper TLS Hostname Verification in Snowflake Connector for Python CVSS 4.0CRITICAL 9.2
  • TI-2026-09272 Streamlit Palette hashing.py weak hash CVSS 4.0LOW 2.0
  • TI-2023-17069 Snowflake Python Connector vulnerable to Command Injection CVSS 3.1HIGH 8.8
  • TI-2023-17068 Snowflake NodeJS Driver vulnerable to Command Injection CVSS 3.1HIGH 8.8
See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences