Answer in brief
CVE-2026-86600 records a Unknown severity vulnerability in Workload identity attestation generated before login host validation in Snowflake drivers. The current sources do not mark it as known exploited. The current feed maps Snowflake/Snowflake Connector for .NET (generic), Snowflake/Snowflake Connector for Python (generic), Snowflake/Snowflake Go Driver (generic), Snowflake/Snowflake JDBC Driver (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Snowflake/Snowflake Connector for .NET (generic), Snowflake/Snowflake Connector for Python (generic), Snowflake/Snowflake Go Driver (generic), Snowflake/Snowflake JDBC Driver (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Snowflake/Snowflake Connector for .NETgeneric | >=4.7.0 <6.1.0 | 6.1.0 |
| Snowflake/Snowflake Connector for Pythongeneric | >=3.14.1 <4.7.3 | 4.7.3 |
| Snowflake/Snowflake Go Drivergeneric | >=1.15.0 <2.2.0 | 2.2.0 |
| Snowflake/Snowflake JDBC Drivergeneric | >=3.24.0 <4.3.4 | 4.3.4 |
| Snowflake/Snowflake Libsnowflakeclientgeneric | >=2.2.0 <2.10.0 | 2.10.0 |
| Snowflake/Snowflake Node.js Drivergeneric | >=2.1.1 <3.3.0 | 3.3.0 |
| Snowflake/Snowflake ODBC Drivergeneric | >=3.9.0 <3.20.0 | 3.20.0 |
| Snowflake/Snowflake PHP PDO Drivergeneric | >=3.6.0 <4.2.0 | 4.2.0 |
Published upstream
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 8, 2026
In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configuration can cause the driver to mint a fresh attestation and send it to a host they control. The captured token can be replayed to Snowflake for its remaining lifetime in accounts where that workload identity is already registered. On Azure, the token audience is also taken from connection configuration. Combined with an attacker-controlled host, the driver can request a Managed Identity access token scoped to a non-Snowflake Azure resource and deliver it to the attacker. That path is the only case in which impact extends beyond Snowflake; it is bounded by the token lifetime and the managed identity’s permissions. Successful exploitation requires WORKLOAD_IDENTITY authentication on a workload that already has an ambient cloud identity. Patched driver versions restrict this authenticator to recognized Snowflake hosts. Users must manually upgrade.
Quoted source text, attributed separately from HOL analysis.