In Apache Polaris versions before 1.8.0, an authenticated principal authorized to create or update Iceberg table properties can set FileIO client settings like s3.endpoint within table metadata. When Polaris performs server-side Iceberg operations (e.g., commits, purges), it may use these settings to construct its FileIO client unless the catalog storage configuration overrides the endpoint. This behavior enables the redirection of server-side storage traffic to an endpoint chosen by the table writer, exposing request authentication material scoped to the operation. This vulnerability arises in environments where table writers are not trusted to configure server-side storage endpoints securely.

An attacker with permission to modify Iceberg table properties can redirect server-side storage requests to a malicious endpoint, potentially exposing sensitive authentication credentials used by Polaris for storage operations. This could lead to unauthorized access or misuse of storage resources. The impact is limited to deployments where table writers are not trusted and can manipulate storage endpoint settings.

A patch is available for Apache Polaris to address this vulnerability. Deployments should upgrade to version 1.8.0 or later. Additionally, ensure that catalog storage configurations override any table-level FileIO client endpoint settings to prevent redirection of storage requests. Restrict permissions to modify Iceberg table properties to trusted principals only.