EUVD-2026-44869
GHSA-5cc2-282f-jjq2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H because exploitation requires an established on-path MITM position; PR:N/UI:N as no auth or victim action is needed once intercepted; C:H/I:H for credential/data theft and SQL injection, A:L for limited availability impact.
Primary rating from Vendor (SNOWFLAKE).
CVSS VectorVendor: SNOWFLAKE
Lifecycle Timeline
4Blast Radius
ecosystem impact- 21 pypi packages depend on snowflake-connector-python (16 direct, 5 indirect)
Ecosystem-wide dependent count for version 4.0.0.
DescriptionCVE.org
Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this by intercepting or redirecting network traffic and presenting a certificate signed by any trusted CA for any domain, causing the connector to accept connections without validating that the certificate matched the requested hostname. Successful exploitation requires an on-path traffic interception capability (e.g. ARP/DNS poisoning, rogue access point, BGP hijacking, or malicious proxy/exit node). This vulnerability may have exposed credentials, query data, and staged file contents to interception and tampering, and may have enabled the attacker to issue arbitrary SQL within the context of the victim's connector session. Impact is limited by the privileges of the affected Snowflake role. The fix is available in Snowflake Connector for Python version 4.7.1. Users must manually upgrade.
Articles & Coverage 1
AnalysisAI
Improper TLS hostname verification in the Snowflake Connector for Python (versions before 4.7.1) lets an on-path attacker defeat HTTPS certificate validation, accepting any certificate signed by any trusted CA regardless of the requested hostname. An adversary who can intercept traffic can decrypt and tamper with connector sessions, exposing Snowflake credentials, query results, and staged file data, and can inject arbitrary SQL bounded by the victim role's privileges. There is no public exploit identified at time of analysis and it is not on CISA KEV, but the reporting vendor (Snowflake) rates it CVSS 4.0 9.2.
Technical ContextAI
The flaw is a CWE-297 (Improper Validation of Certificate with Host Mismatch) defect in the connector's TLS client stack. TLS certificate validation has two independent steps: verifying the certificate chains to a trusted CA, and verifying that the certificate's subject/SAN matches the hostname being contacted. Here the chain-of-trust check passed but the hostname-matching check was effectively skipped, so a valid certificate issued for attacker.example (or any domain) was accepted for connections to *.snowflakecomputing.com. The affected component is cpe:2.3:a:snowflake:snowflake_connector_for_python for all versions prior to 4.7.1, the official Python driver used by applications and data pipelines to authenticate to Snowflake, run queries, and PUT/GET staged files over HTTPS. The 4.7.1 release notes reference the fix as 'Improved verification of TLS connections (SNOW-3675579)'.
RemediationAI
Vendor-released patch: version 4.7.1. Upgrade the Snowflake Connector for Python to 4.7.1 or later (e.g. pip install --upgrade snowflake-connector-python>=4.7.1); the fix must be applied manually as there is no automatic update, and pinned/vendored dependency manifests, container images, and lockfiles must be rebuilt to actually pull the patched wheel. Verify the fix corresponds to release note item 'Improved verification of TLS connections (SNOW-3675579)' at https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.1. Until every deployment is upgraded, reduce on-path exposure: run connectors only over trusted network paths and avoid untrusted/public networks (trade-off: operational restriction on where jobs run), route egress through a controlled forward proxy or VPN with pinned/known-good TLS terminators rather than arbitrary exit nodes, and where feasible enforce that connections reach only legitimate *.snowflakecomputing.com/*.snowflakecomputing.cn hosts via egress firewall allowlisting (trade-off: does not stop DNS/BGP redirection to a spoofed host presenting a mismatched-but-CA-valid cert, so it is only a partial control). Also rotate any Snowflake credentials that may have transited pre-patch connectors over untrusted networks.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Cross-user flow execution in Langflow (< 1.9.1) lets any authenticated API-key holder run another user's flow by passing
Same technique Authentication Bypass
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today