CVE-2025-46327

Summary

CVE-2025-46327 is a vulnerability affecting versions of the gosnowflake Snowflake Golang driver from 1.7.0 to before 1.13.3. This issue involves a Time-of-Check to Time-of-Use (TOCTOU) race condition on Linux and macOS. The driver uses user-provided files for logging configuration, which it checks for write access by the file owner. However, this check was susceptible to a TOCTOU race condition, allowing a local attacker with write access to the configuration file or its directory to manipulate logging levels and output locations. This vulnerability has been addressed in version 1.13.3.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.