What is CVE-2026-19594?

CVE-2026-19594 is a high-severity vulnerability in Snowflake Python Apis, classified under Path Traversal. CVSS score: 8.1/10. Published 2026-08-12.

How severe is CVE-2026-19594?

High severity. CVSS v3 base score is 8.1 out of 10.

Path Traversal in Snowflake Python Apis

CVE-2026-19594

Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path seg…

Vulnerability class: Path Traversal (Directory Traversal)

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Snowflake Python Apis — versions 0

Weakness classification (CWE)

CWE-22 — Path Traversal
CWE-141

References

412d305a-227d-44f9-a262-a31ba44f2aea

Frequently asked questions

What is CVE-2026-19594?: CVE-2026-19594 is a high-severity vulnerability in Snowflake Python Apis, classified under Path Traversal. CVSS score: 8.1/10. Published 2026-08-12.
How severe is CVE-2026-19594?: High severity. CVSS v3 base score is 8.1 out of 10.