CVE-2026-81930

The Apache Airflow Snowflake provider contains a vulnerability where the account and region connection fields are not validated before being interpolated into request URLs. By providing values containing /, ?, or #, an attacker can manipulate the request host, causing the provider to send an Auth...

EUVD-2026-88696

Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...