Vulnerability · Published Sep 4, 2026 · Assigned by SNOWFLAKE
CVE-2026-85528Snowflake JDBC Driver auto-configuration account validation permits credential redirection
Medium 5.3
In plain English
A medium-severity improper input validation in Snowflake JDBC Driver from Snowflake. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Official description
Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to transmit a reusable login credential to a host of their choosing and replay it to obtain the privileges granted to that credential. Successful exploitation requires an application using jdbc:snowflake:auto with a connections.toml section that omits an explicit host and a lower-trust principal able to set the account value; ordinary JDBC URLs are unaffected. The fix is available in Snowflake JDBC Driver version 4.3.4, including the snowflake-jdbc-fips and snowflake-jdbc-thin. Users must manually upgrade.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Snowflake | Snowflake JDBC Driver | 4.2.0 – before 4.3.4 |
| Snowflake | Snowflake JDBC Driver (FIPS) | 4.2.0 – before 4.3.4 |
| Snowflake | Snowflake JDBC Driver (Thin) | 4.2.0 – before 4.3.4 |
Weakness: CWE-20, CWE-918 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N