Local File Exposure in Snowflake Connector for Python on Linux Systems

CVE-2025-24795

What is CVE-2025-24795?

A vulnerability has been identified in the Snowflake Connector for Python which compromises credential security on Linux systems. When temporary credential caching is activated, the connector inadvertently stores sensitive temporary credentials in a file that is accessible to all users on the system. This breach allows unauthorized individuals to potentially access confidential data. The issue affects versions 2.3.7 to 3.13.0. Users are urged to upgrade to version 3.13.1 or later to mitigate this risk. For more detailed information, please refer to the security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References