CVE-2026-42810 - Vulnerability Analysis

Overview

Apache Polaris 1.4.0 contains an access control bypass caused by unescaped '*' characters in namespace and table names used in S3 IAM policies, letting attackers with crafted table names access and modify other tables' S3 data, exploit requires ability to create wildcard tables.

Severity & Score

Impact

Attackers can read, list, create, and delete data in other tables' S3 storage, leading to data disclosure and tampering.

Mitigation

Update to the latest version where S3 IAM resource patterns properly escape wildcard characters.

References

• https://lists.apache.org/thread/gg3qq9sqg4hdjmprqy46p40xmln61dm9
• http://www.openwall.com/lists/oss-security/2026/05/02/11

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner