CVE-2026-114456

Multiple Snowflake client drivers using the authenticator=externalbrowser SSO flow are vulnerable to an Origin Validation Error (CWE-346) . The local loopback callback listener fails to verify a CSRF state value and reflects arbitrary request Origin headers into CORS responses. This allows an att...