Local Loopback Callback Vulnerability in Snowflake Client Drivers

CVE-2026-114456

What is CVE-2026-114456?

The vulnerability affects multiple Snowflake client drivers that utilize the authenticator=externalbrowser single sign-on flow. An attacker could exploit weaknesses in the local loopback callback listener, which handles responses from the identity provider. Due to inadequate verification of CSRF tokens and improper handling of CORS headers, an attacker could submit a forged callback response, affecting user login attempts. Victims of this attack may experience authentication failures, thereby compromising the security of their accounts. The vulnerability has been addressed in recent software updates, and users are advised to upgrade manually to secure their applications.

References