CVE-2026-97395 Server-side request forgery in Apache Polaris
Authorized table writers can redirect server-side storage requests to attacker endpoints, exposing credentials and data in Apache Polaris deployments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-97395?
CVE-2026-97395 is a high-severity server-side request forgery vulnerability in Apache Polaris, published on 29 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata.
In versions < 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use those settings to construct its (server-side) FileIO client. If the catalog storage configuration does not override the endpoint, Polaris can send storage requests to a host chosen by the table writer, using credentials scoped to the operation.
This can redirect server-side storage traffic and expose request authentication material to the chosen endpoint. Deployments are affected when table writers are not trusted to configure server-side storage endpoints.
Weakness: CWE-862
Which versions are affected by CVE-2026-97395?
How do I fix CVE-2026-97395?
Upgrade to a fixed version.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-97395 being exploited?
There is no known exploitation of CVE-2026-97395 in the wild and no public exploit code.
Sources
Also known as GHSA-848v-j2j6-p92w, MINI-356j-55j2-jvc4, MINI-4cwf-5jpf-3hq3, MINI-9qfg-grmh-jrqq, MINI-qrp5-f5g4-73x4.