CVE-2026-42812 - Vulnerability Analysis

Overview

Apache Polaris contains a broken access control vulnerability caused by skipping location validation on metadata writes when only the write.metadata.path property is changed, letting authenticated users write metadata to attacker-chosen storage locations, exploit requires ability to alter table settings.

Severity & Score

Impact

Authenticated users can write metadata to arbitrary storage locations, potentially exposing or corrupting data and gaining unauthorized storage access.

Mitigation

Disable polaris.config.allow.unstructured.table.location or ensure strict validation of write.metadata.path changes; update to latest Polaris version with fix.

References

• https://lists.apache.org/thread/wxd2wj3p0smvrk84msv317wg5tp3jtw9
• http://www.openwall.com/lists/oss-security/2026/05/02/13

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner