Information disclosure in Snowflake Connector_for_c\/c\+\+
CVE-2025-46329
libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the c…
EPSS: 0.001 (1.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Snowflake Connector_for_c\/c\+\+
- Snowflakedb Libsnowflakeclient — versions >= 0.5.0, < 2.2.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2025-46329?
- CVE-2025-46329 is a low-severity vulnerability in Snowflake Connector_for_c\/c\+\+, classified under Insertion of Sensitive Information into Log File. CVSS score: 3.3/10. Published 2025-04-29.
- How severe is CVE-2025-46329?
- Low severity. CVSS v3 base score is 3.3 out of 10.