AIKIDO-2026-514769

snowflake-connector-python is vulnerable to Insufficiently Protected Credentials

Insufficiently Protected Credentials Pre-CVE Published 3 days ago

Medium Risk

This Affects:

snowflake-connector-python

3.14.1 - 4.7.2

Fixed in 4.7.3

Are you affected? Scan for Free

TL;DR

The WORKLOAD_IDENTITY authenticator obtains an ambient cloud identity attestation and presents it to the configured connection host without verifying that the host is a recognized Snowflake endpoint. When the host is influenced by untrusted configuration or input, the workload identity credential is delivered to a non-Snowflake, potentially adversary-controlled destination. That leaked attestation can then be replayed to impersonate the workload against Snowflake. The fix normalizes and suffix-anchors the connection host against recognized Snowflake domains before any credential is fetched.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you connect using the WORKLOAD_IDENTITY authenticator to a host that can be influenced by untrusted configuration or input.