CVE-2025-46326

CVE-2025-46326 describes a Time-of-Check to Time-of-Use (TOCTOU) race condition in snowflake-connector-net versions 2.1.2 through 4.4.0, specifically impacting the Easy Logging feature on Linux and macOS. A local attacker with write access to the logging configuration file or its directory could exploit this to manipulate logging settings, potentially leading to information disclosure or denial of service. With a CVSS score of 7.0 (HIGH), the vulnerability has high impact on confidentiality, integrity, and availability, but requires high attack complexity. There is currently no public exploit intelligence, active exploitation, or significant community discussion surrounding this CVE.