CVE-2025-46329 - CVE House
Back to Database
Status published Low CVE-2025-46329

Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs

Vulnerability Description

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations, and is not logged server-side by Snowflake. This issue has been patched in version 2.2.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-46329

Credits & Attribution

No credits recorded in the NVD database.

References

More from snowflakedb

View All →
CVE-2025-46330
Snowflake Connector for C/C++ retries malformed requests
Low 3.3
CVE-2025-46328
NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file
Low 3.3
CVE-2025-46327
Go Snowflake Driver has race condition when checking access to Easy Logging configuration file
Low 3.3
CVE-2025-46326
Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file
Low 3.3
CVE-2025-27496
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Low 3.3

Affected Vendor

snowflakedb

View all reports →

Affected Software

libsnowflakeclient
Vulnerable Versions:
>= 0.5.0, < 2.2.0

Timeline

Official Publish: April 29th, 2025
Last Modified: April 29th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-532

MITRE ATT&CK TTPs

T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1555 Credentials from Password Stores
Credential Access
T1078 Valid Accounts
Persistence
T1562 Impair Defenses
Defense Evasion