Product
SAP Cloud SDK for Python
- First Reported
- Oct 13, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (4)
- SAP has disclosed CVE-2026-89111, a maximum-severity server-side request forgery (SSRF) vulnerability in SAP Cloud SDK for Python that can expose OAuth2 client credentials. Critical SAP Cloud SDK SSRF Could Expose OAuth2 Client Credentials
- At the top of the list is CVE-2026-89111 (CVSS score of 10/10), an OAuth2 SSRF vulnerability in Cloud SDK for Python that impacts multi-tenant BTP applications. SAP Patches Critical NetWeaver, S/4HANA and Other Vulnerabilities
- A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP SAP Cloud SDK for Python Flaw Could Expose OAuth2 Credentials
- "The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. SAP Patches Maximum-Severity OAuth2 SSRF Flaw in Python SDK
CVE (6)
People (2)
Vendors (1)
Products (9)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.