Insufficiently Protected Credentials

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the WORKLOADIDENTITY authenticator through AuthByWorkloadIdentity.prepare in src/snowflake/connector/auth/workloadidentity.py. An...

CVE-2026-86600

In affected Snowflake drivers, WORKLOADIDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configuration can cause the driver to mint a...

CVE-2026-86600

Snowflake drivers (PHP PDO, .NET, Go, Python, ODBC, libsnowflakeclient, JDBC, Node.js) are affected by a flaw in WORKLOAD_IDENTITY authentication: the driver mints a cloud workload-identity token and attaches it to the login request without verifying the configured host is a Snowflake endpoint . ...

CVE-2026-86600: Insufficiently Protected Credentials

In affected Snowflake drivers, WORKLOADIDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configuration can cause the driver to mint a...