CVE-2025-24789

Summary

CVE-2025-24789 is a vulnerability affecting the Snowflake JDBC Driver on Windows. The issue arises when the EXTERNALBROWSER authentication method is used, allowing an attacker with write access to a directory in the %PATH% to escalate their privileges to the user running the vulnerable JDBC Driver version (3.2.3 through 3.21.0). This vulnerability was discovered and remedied by Snowflake, with the fix implemented in version 3.22.0. Java programs using this driver to connect to Snowflake are at risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.