Snowflake Connector for Python vulnerabilities

Latest Snowflake Connector for Python CVEs

Newest publication first

1. CVE-2026-15925 Improper TLS Hostname Verification in Snowflake Connector for Python

   Published 2026-07-16

   Critical·CVSS 9.2 EPSS 0.18%

   Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access cou...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.