The vulnerability in Snowflake Connector for Python 3.14.1 arises because WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a legitimate Snowflake endpoint. An attacker able to modify the connection configuration can cause the driver to mint a fresh attestation token and send it to a host they control, capturing the token. This token can then be replayed to Snowflake within its lifetime on accounts where the workload identity is registered. On Azure, the token audience is derived from the connection configuration, allowing an attacker-controlled host to request a Managed Identity access token scoped to a non-Snowflake Azure resource and deliver it to the attacker. This latter impact is limited by token lifetime and managed identity permissions. Exploitation requires WORKLOAD_IDENTITY authentication on a workload with an ambient cloud identity. The vendor has released a patch that restricts the authenticator to recognized Snowflake hosts, mitigating the issue. Users must manually upgrade to the patched version.

Successful exploitation allows an attacker who can modify the connection configuration to capture valid workload-identity tokens and replay them to Snowflake, potentially gaining unauthorized access to Snowflake accounts where the workload identity is registered. On Azure, the attacker can also obtain Managed Identity access tokens scoped to other Azure resources, limited by token lifetime and permissions, potentially exposing additional resources beyond Snowflake. The vulnerability does not impact availability and requires low privileges but high attacker control over connection configuration. The CVSS 3.1 score is 8.2 (high), reflecting network attack vector, high confidentiality and integrity impact, but high attack complexity and low privileges required.

A patch is available that restricts the WORKLOAD_IDENTITY authenticator to only recognized Snowflake hosts, preventing tokens from being sent to attacker-controlled hosts. Users must manually upgrade the Snowflake Connector for Python from version 3.14.1 to a patched version. Since this is a client-side driver vulnerability, upgrading is essential to mitigate the risk. No other mitigations are indicated by the vendor advisory. The vendor manages remediation for the cloud-hosted Snowflake service itself, but client upgrades are required to secure the connector.