File Exposure Vulnerability in Snowflake Connector for .NET by Snowflake

CVE-2025-24788

What is CVE-2025-24788?

A vulnerability in the Snowflake Connector for .NET allows files downloaded from stages to be temporarily stored in a world-readable directory. This configuration may expose sensitive data to unauthorized users on the same machine, increasing the risk of data breaches. The vulnerability impacts versions 2.0.12 through 4.2.0 on Linux and macOS systems. Snowflake has addressed this issue in version 4.3.0, which users are encouraged to upgrade to in order to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References