CVE-2026-3293 snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos
A local attacker can cause denial of service in the Snowflake JDBC library by exploiting inefficient regular expression complexity in the proxy route planner.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-3293?
CVE-2026-3293 is a medium-severity denial of service vulnerability in snowflakedb snowflake-jdbc, published on 27 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts can lead to inefficient regular expression complexity. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 5fb0a8a318a2ed87f4022a1f56e742424ba94052. A patch should be applied to remediate this issue.
Which versions are affected by CVE-2026-3293?
2 open source packages ship an affected version, including net.snowflake:snowflake-jdbc. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
net.snowflake:snowflake-jdbc Maven | All versions to 4.0.1 | None |
net.snowflake:snowflake-jdbc Maven | All versions to 4.0.1 | None |
Products include Snowflake Snowflake Jdbc.
How do I fix CVE-2026-3293?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-3293 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-3293 exists.
Other vulnerabilities in snowflakedb snowflake-jdbc
- CVE-2025-24789 Snowflake JDBC allows an untrusted search path on Windows
- CVE-2023-30535 Snowflake JDBC vulnerable to command injection via SSO URL authentication
- CVE-2024-43382 Snowflake JDBC Security Advisory
- CVE-2025-24790 Snowflake JDBC uses insecure temporary credential cache file permissions
- CVE-2025-27496 Snowflake JDBC Driver client-side encryption key in DEBUG logs
Sources
Also known as GHSA-gx6c-pv62-9mcf, RHLW-2026-e9343e476d7f9acf.