Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials (CVE-2026-97395) | HOL Guard CVE

Unknown severity · Source severity not reportedCVE-2026-97395

Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials

Answer in brief

CVE-2026-97395 records a Unknown severity vulnerability in Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials. The current sources do not mark it as known exploited. The current feed maps Apache Software Foundation/Apache Polaris (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 29, 2026Updated Sep 29, 2026Source checked Sep 29, 2026First seen by HOL Sep 29, 2026Material review Sep 29, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 1 mapped package or product
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Apache Software Foundation/Apache Polaris (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Apache Software Foundation/Apache Polarisgeneric	>=0 <1.8.0	1.8.0

Recommended response

Check inventory. Check lockfiles and deployed manifests for Apache Software Foundation/Apache Polaris.
Review the reported fix. Update Apache Software Foundation/Apache Polaris to 1.8.0 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 29, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 29, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 29, 2026

Sources and claim methodology

Source referencelists.apache.org

Upstream source description

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions < 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use those settings to construct its (server-side) FileIO client. If the catalog storage configuration does not override the endpoint, Polaris can send storage requests to a host chosen by the table writer, using credentials scoped to the operation. This can redirect server-side storage traffic and expose request authentication material to the chosen endpoint. Deployments are affected when table writers are not trusted to configure server-side storage endpoints.

Quoted source text, attributed separately from HOL analysis.