CVE-2026-15925: Snowflake Connector for Python 3.17.4 to before 3.18.1, 4.0.0 to before 4.7.1

Affected technology

Snowflake Connector for Python · 3.17.4 to before 3.18.1, 4.0.0 to before 4.7.1
Snowflake

Description’s affected range: versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An attacker with on-path network access could exploit this by intercepting or redirecting network traffic and presenting a certificate signed by any trusted CA for any domain, causing the connector to accept connections without validating that the certificate matched the requested hostname. Source advisory’s CVSS 4.0 assessment (base score 9.2/10) rates confidentiality and integrity impact as high; availability impact as low.