CVE-2025-24788

Summary

CVE-2025-24788 is a vulnerability affecting the Snowflake Connector for .NET, identified as snowflake-connector-net. This issue stems from files downloaded from Snowflake stages being temporarily stored in a world-readable local directory, which can be accessed by unauthorized users on the same machine, leading to potential data exposure. The vulnerability impacts versions 2.0.12 to 4.2.0 on Linux and macOS. Snowflake addressed this security concern with the release of version 4.3.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.