OAuth Passthrough Vulnerability in Grafana Snowflake Datasource Plugin

CVE-2025-3717

What is CVE-2025-3717?

The Grafana Snowflake Datasource Plugin is vulnerable in scenarios where OAuth passthrough is enabled. If multiple users access the same datasource concurrently on a single Grafana instance, there is a risk of the incorrect user identifier being utilized. This flaw can lead to unauthorized access, enabling users to obtain sensitive data not intended for them. It predominantly affects versions from 1.5.0 to prior to 1.14.1, posing serious concerns for data privacy and security.

References