Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Polaris

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-64640 Public exploit

    Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation

    Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to…

    Apache Software Foundation Apache Polaris apache-polaris PyPI