Snowflake JDBC Driver

4 known vulnerabilities in Snowflake JDBC Driver, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-86600 CVSS 8.2 high In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login…
  • CVE-2026-86597 CVSS 6.5 medium Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed…
  • CVE-2026-85528 CVSS 5.3 medium Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a…
  • CVE-2026-85525 CVSS 7.4 high Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted…