Get real-time updates on Telegram

Snowflake drivers writes sensitive information to logs

CVE-2026-86597 affects snowflake-sdk. CVSS base score 6.5 (GitHub Advisory Database). EPSS 0.00121 (percentile 0.0167), scored 2026-10-04. Affected range: < 3.3.0. Fixed version: 3.3.0. Affected range: < 4.7.3. Fixed version: 4.7.3. Affected range: <= 1.19.1. Affected range: < 4.3.4. Fixed version: 4.3.4. Affected range: < 4.3.4. Fixed version: 4.3.4. Affected range: < 4.3.4. Fixed version: 4.3.4. Affected range: < 2.2.0. Fixed version: 2.2.0.

Published 2026-10-05 23:14:26.234444+00:00

CVE

CVE-2026-86597

Product

snowflake-sdk

CCR priority

26.0 /100 (P4)

CVSS

6.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · GitHub Advisory Database

EPSS

0.00121 · percentile 0.0167 · 2026-10-04

KEV

no

Affected products

• snowflake-sdk · < 3.3.0 · Fixed version: 3.3.0
• snowflake-connector-python · < 4.7.3 · Fixed version: 4.7.3
• github.com/snowflakedb/gosnowflake · <= 1.19.1
• net.snowflake:snowflake-jdbc · < 4.3.4 · Fixed version: 4.3.4
• net.snowflake:snowflake-jdbc-thin · < 4.3.4 · Fixed version: 4.3.4
• net.snowflake:snowflake-jdbc-fips · < 4.3.4 · Fixed version: 4.3.4
• github.com/snowflakedb/gosnowflake/v2 · < 2.2.0 · Fixed version: 2.2.0

Provenance

• GitHub Advisory Database · Source record · observed 2026-10-05 23:10:51.172112+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-86597.html