CVE-2026-86597Published
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be wr…
Exact source revision recorded 25 Oct 2026 16:19:16 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-86597 · Microsoft / collected KEV context
nvd · CVE-2026-86597
- https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026
- https://docs.snowflake.com/en/release-notes/clients-drivers/jdbc-2026#version-434-sep-03-2026
- https://docs.snowflake.com/en/release-notes/clients-drivers/nodejs-2026#version-330-september-3-2026
- https://docs.snowflake.com/en/release-notes/clients-drivers/odbc-2026#version-3200-sep-3-2026
- https://docs.snowflake.com/en/release-notes/clients-drivers/php-pdo-2026#version-420-sep-3-2026
- https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.3
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.