CVE-2026-123859

The Snowflake Connector for Python and Snowflake Connector for Python (Universal Core) are vulnerable to SQL injection via the write_pandas() data-loading functionality. When identifier escaping is disabled through a non-default configuration, the software fails to escape DataFrame column names b...