SAP's October patch day (13 October) addressed 20 flaws including a maximum-severity OAuth2 server-side request forgery in the SAP Cloud SDK for Python (CVE-2026-89111, CVSS 10.0), affecting versions before 0.45.2. The SDK is SAP's official toolkit for building AI agents and Python applications on SAP Business Technology Platform (BTP) services. The vulnerability affects multi-tenant BTP applications: an attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated. SAP released 0.45.2 on 21 August with a strict check that tenant subdomains contain only letters, numbers and hyphens (up to 63 characters); passing URL delimiters now raises ValueError immediately instead of routing credentials to an attacker-controlled endpoint. Onapsis estimated over 10,000 internet-facing SAP systems use the vulnerable component. No evidence of in-the-wild exploitation has been reported. Financial-services organisations running SAP BTP should update the SDK to 0.45.2+ and monitor OAuth2 token requests for redirection to unexpected servers.

• Source article