TI-2026-31028 CVE-2026-42810 · GHSA-vxgg-mqx2-3w59
Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names
Priority MEDIUM 43
Apache Polaris accepts literal `*` characters in namespace and table names.
Vulnerabilities
4 records
TI-2026-31029 CVE-2026-42811 · GHSA-fc3h-c6h7-r83j
Improper input validation in Apache Polaris
Priority MEDIUM 43
In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause those credentials to work across the configured bucket…
TI-2026-31027 CVE-2026-42809 · GHSA-8ggj-j522-h5qf
Apache Polaris: staged table creation could vend storage credentials for unvalidated locations
Priority MEDIUM 42
Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved.
TI-2026-31030 CVE-2026-42812 · GHSA-w76p-3cgp-qfcm
Apache Polaris: No protection on `write.metadata.path`
Priority MEDIUM 42
In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read.