CVE-2025-46329

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations, and is not logged server-side by Snowflake. This issue has been patched in version 2.2.0.

• CWE-532

• https://github.com/snowflakedb/libsnowflakeclient/commit/3caa8a6a3ee95e0a66ead03b4bf6a2d1ca42ebfePatch
• https://github.com/snowflakedb/libsnowflakeclient/security/advisories/GHSA-jx4f-645p-wjpxVendor Advisory

Published

Apr 29, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-46316An out-of-bounds read was addressed with improved input vali…4.3
• CVE-2025-4632Improper limitation of a pathname to a restricted directory …9.8
• CVE-2025-46320A cross-site scripting (XSS) vulnerability in a FileMaker We…6.1
• CVE-2025-46326snowflake-connector-net is the Snowflake Connector for .NET.…7
• CVE-2025-46327gosnowflake is the Snowflake Golang driver. Versions startin…7
• CVE-2025-46328snowflake-connector-nodejs is a NodeJS driver for Snowflake.…7
• CVE-2025-4633Default credentials were present in the web portal for Airpo…6.5
• CVE-2025-46330libsnowflakeclient is the Snowflake Connector for C/C++. Ver…3.3
• CVE-2025-46331OpenFGA is a high-performance and flexible authorization/per…9.8
• CVE-2025-46332Flags SDK is an open-source feature flags toolkit for Next.j…6.5
• CVE-2025-46333z2d is a pure Zig 2D graphics library. Versions of z2d after…7.3
• CVE-2025-46334Git GUI allows you to use the Git source control management …8.6