Apache Polaris accepts literal `*` characters in namespace and table names. When it
later builds temporary S3 access policies for delegated table access, those
…

Apache Polaris accepts literal asterisk characters in namespace and table names, which are later reused unescaped in S3 IAM resource patterns. This allows attackers to create crafted table names that act as wildcards in IAM policies, enabling unauthorized access to other tables' S3 locations. The vulnerability affects Polaris 1.4.0 and allows reading metadata files, listing table prefixes, and creating/deleting objects in other tables' storage paths. Attackers can exploit this with minimal permissions to access tables they should not have access to.