CVE-2026-97395: Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials
Apache Polaris before 1.8.0 lets authorized Iceberg table writers set FileIO endpoints in metadata, redirecting server-side requests to attacker-controlled servers.
CVE-2026-97395, rated important, affects Apache Polaris before 1.8.0. An authenticated principal permitted to create or update Iceberg table properties can set FileIO client settings such as s3.endpoint in table metadata, which Polaris then uses to construct its server-side FileIO client during commits and purges. This can redirect operation-scoped storage credential requests to attacker-controlled endpoints. The flaw was posted to oss-security by Jean-Baptiste Onofré and is fixed in version 1.8.0.
- Authenticated table writers can set s3.endpoint in Iceberg table metadata
- Server-side commits and purges then contact attacker-controlled endpoints using storage credentials
- Fixed in Apache Polaris 1.8.0
- CVEs
- CVE-2026-97395
- Organizations
- Apache Software FoundationApache Polaris
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-97395 | FileIO endpoint redirect leaks credentials in Apache Polaris | 8.1 | — |
From the original article
Posted by Jean-Baptiste Onofré on Sep 29 Severity: important Affected versions: - Apache Polaris before 1. 8. 0 Description: Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.