A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant ...
CVE-2026-89111 is a critical SSRF vulnerability affecting the SAP Cloud SDK for Python. The vulnerability arises from improper validation of the tenant_subdomain parameter during OAuth2 token requests ...