en
Snowflake Connector for Python is a database driver provided by Snowflake. It lets Python applications connect to Snowflake, execute SQL statements, and fetch results through the Python Database API v2.0. The connector is a native Python package installed into supported Python environments and is intended for developers and organizations building data applications, services, and automation.
As of 09/20/2026, within CyStack's analyzed data, Snowflake Connector for Python has 4 security vulnerabilities published in the last 90 days. Of these, 3 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Snowflake Connector for Python and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScanSeverity across 4 analyzed records
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86600Workload identity attestation generated before login host validation in Snowflake drivers | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-86597Sensitive information written to logs by Snowflake drivers | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-85525Improper OCSP response validation in Snowflake drivers | Exploitation statusNot known exploited | FixYes | Published09/04/2026 | SeverityHigh |
CVE-2026-15925Improper TLS Hostname Verification in Snowflake Connector for Python | Exploitation statusNot known exploited | FixYes | Published07/16/2026 | SeverityCritical |
