Snowflake Libsnowflakeclient vulnerabilities

2 CVEs affecting Snowflake Libsnowflakeclient, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-86600, published 2026-09-08.

More from Snowflake.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-16870, published 2026-07-24. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file…
• CVE-2026-86600, published 2026-09-08. High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days. In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake…